a8b6832c004df108683125c20423830e_JaffaCakes118 | Triage

Sharing

General

Target

a8b6832c004df108683125c20423830e_JaffaCakes118
Size

2.0MB
MD5

a8b6832c004df108683125c20423830e
SHA1

339175d84030a378216351a723975d83d80cf34a
SHA256

f0de517d30c2d9f41e9bbb1055e62ef0dba39567543fcda2230e9621ca05156d
SHA512

609274bb5276052a4f1df01fe6175b3a6b76d3cd11a38d89758aff860f3d81a6c06ca23a472bc5302353849bcdfd4534698c9e201d2bb02d913e4d7822c20884
SSDEEP

49152:3gPaRIlngEP6NvrhasUR7tlnFuvGZZ/7LRR82AYL6fRyJsdRu1hZVgCZ:Snx6xlasyIMSdJyJsPcL20

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sndrec.exe

Files

a8b6832c004df108683125c20423830e_JaffaCakes118
.rar
logo.gif
.gif
sndrec.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载使用说明.txt