290ced6858d33daab7be8147f98b0bb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

290ced6858d33daab7be8147f98b0bb3_JaffaCakes118
Size

4.0MB
MD5

290ced6858d33daab7be8147f98b0bb3
SHA1

501fd9708a9d1cc773002a15807137a643beaf08
SHA256

4c4c28b4fc24feb33301708e5382e9476d954ac66db3dc2de966580b1bcd7006
SHA512

847df746a4a8238c082f994da565c5a54eaee6283487295d19188abe4af83f88ac2f67e03c7ceb8960718d21cb6d48b744116d01f39a96ba78309514f06e9530
SSDEEP

49152:AxLIHtiO+TqigLhtjwm5JTx6x/5d8wa0/vZxqsM+cYqJ0St3qEn6FEenRNDxcbLX:AEAuLht0IxI5qwRXqfBPnqqenuLpiQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup.exe

Files

290ced6858d33daab7be8147f98b0bb3_JaffaCakes118
.rar
setup.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
安装说明.url
.url
汉化新世纪.txt
汉化说明.txt