355c710879581d654409e8750c2739ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

355c710879581d654409e8750c2739ad_JaffaCakes118
Size

13KB
MD5

355c710879581d654409e8750c2739ad
SHA1

d08a5d64ead9a1259c3dd64ff0bbda2a237e4d9a
SHA256

92e01c3ab860d828d27bfa9f01a3fe1e80033f3d286ae75b316610eac06aac1e
SHA512

ad0d3e25ec08a1d14f720c4174d06537f73d23ad824fb06a88b355da6517f2f0c64803e9cee54884b034b4213ad1fce45d523e97981185981db3cda53a7e5b6f
SSDEEP

384:4zKcxLse9fjNoln+6qLyMSiQWhUx+C2iKfRY2HG+dJw:4FPhNuMy0QxQcKp

Score

1^/10

Malware Config

Signatures

Files

355c710879581d654409e8750c2739ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95
Certificate

Issuer

CN=Qizhi Software (beijing) Co. Ltd

Not Before

31/12/2007, 16:00

Not After

31/12/9998, 16:00

Subject

CN=Qizhi Software (beijing) Co. Ltd

46:5c:9e:e5:0f:91:ca:90:d2:a1:2d:a2:05:6a:5a:56:cc:96:02:28
Signer

Actual PE Digest

46:5c:9e:e5:0f:91:ca:90:d2:a1:2d:a2:05:6a:5a:56:cc:96:02:28

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.packed
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.packed
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE