0332f39ef2b29ea4cb0b51a380cce762_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0332f39ef2b29ea4cb0b51a380cce762_JaffaCakes118
Size

325KB
MD5

0332f39ef2b29ea4cb0b51a380cce762
SHA1

5dc2b1f738c0e4211ce3fdadc455d5b25cafdaea
SHA256

5a09937dc62a9b5762edff8578106272ad8f94a3eef552e51d79bdaadb633928
SHA512

49c241d3ffeae6f28e3119afa3f307567074e2263e3e83c9fa589f38e1009ca01e6f4363cf771326f63bb5c1fb1f51d0db90ad1a5d78853e5378c072f7d4629a
SSDEEP

6144:ltoCIEvAsI/7K4WGvlpSXT7JKVZIDS/R1LwzByfn41QmvPnWlpUM4JSw:voA4s0zWGtpSjGGDO1uBU41Qmvf4pUMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/wxjkly0705/蓝软基地教程.exe

Files

0332f39ef2b29ea4cb0b51a380cce762_JaffaCakes118
.rar
wxjkly0705/蓝软基地教程.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ