08fdadfc69c1e1f1bb475389b28909e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08fdadfc69c1e1f1bb475389b28909e0_JaffaCakes118
Size

3.4MB
MD5

08fdadfc69c1e1f1bb475389b28909e0
SHA1

25b68f4f446f2ff8621aeb349314092452570b34
SHA256

e923968076bda3d664a5789341bf48a4ba433f405fec58373d562f78b4092b90
SHA512

68d568cf1038a209c47171b6f9eecb79261c7bc438fc0ce80acfdff3e60885150111fe335a5137edd10426e6588afc279b5d86a74dedfba3cd3513d0e786aa00
SSDEEP

98304:51MW0YF9gZvB1YI7gUZ8yyZgKKbl3zoqokOIUNJ3XW87H:5Hh9KZ+2UG3OLT3XW87H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Battlefield 3_wh.exe

Files

08fdadfc69c1e1f1bb475389b28909e0_JaffaCakes118
.rar
Battlefield 3_wh.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

'��I��
Size: - Virtual size: 304KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Ҫ��J
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Thumbs.dll
ПРОЧТИ!!!.txt