21715d2e957e546474553efe03f0f71e_JaffaCakes118 | Triage

Sharing

General

Target

21715d2e957e546474553efe03f0f71e_JaffaCakes118
Size

5.9MB
MD5

21715d2e957e546474553efe03f0f71e
SHA1

2c057d8a89628cc19b9050cf50cc8d9948a67058
SHA256

c6207599e0d816df9962ee08c0e1032fd749edb8791c1f895bf57675671c1421
SHA512

885bf39607b6271b69176ad39965a1d426ad50bcea89a5102927d84094f95e0f99b0b7d0ba597b9c9526f26fd1df6ac51d13c5287bc25c890232e35c8fc8c394
SSDEEP

98304:nNRveIr27Dz/Y2wPs1hzsqQn1OvsNJgvm8FDQehsIG6FiBqV7GQtu28XrbMgkN6m:nzveIr2zgD+cgUNqO8FFh46FTE4JYbMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CAD2EXE V10.3/CAD Protector V10.3.exe

Files

21715d2e957e546474553efe03f0f71e_JaffaCakes118
.rar
CAD2EXE V10.3/CAD Protector V10.3.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 761KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CAD2EXE V10.3/cad2exe软件使用视频教程.wmv
CAD2EXE V10.3/新云软件.url
.url