34d318af7d9055ef179a488755baa141_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d318af7d9055ef179a488755baa141_JaffaCakes118
Size

334KB
MD5

34d318af7d9055ef179a488755baa141
SHA1

43730ccf2a3e7b0f2fe975d1612b6ccc49d4b32d
SHA256

b8cfdf047cb9fa6c22c8b950ef51394662b87034891b396550be0c62ea2d3023
SHA512

91c01841a6b2366df51233c03632f4a20150f6177738a5a29d5b24a5c1fc2f4b897d1ced723de5d532e9fa1615b723a6433f0cb19628c1b9f85a8b329da208d6
SSDEEP

6144:3ZbSDFv2foQdS59OhWdTqnK7yo24br4/SsxZw9NKpUlP+eave+iC:9gF+LdzhgxD24bEKsb/6+d9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pcboost.exe

Files

34d318af7d9055ef179a488755baa141_JaffaCakes118
.rar
pcboost.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

��ү
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ү
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ү
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ү
Size: 874KB - Virtual size: 874KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ү
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
下载说明.htm
.html .js polyglot
安装说明.txt
汉化说明.txt
非常世纪资源网.url
.url