383a95e63d8bac05dd743eee52ffe8df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

383a95e63d8bac05dd743eee52ffe8df_JaffaCakes118
Size

3.9MB
MD5

383a95e63d8bac05dd743eee52ffe8df
SHA1

b32fcf9caeaf4e7ebc83de513ba1db5d3396b0dc
SHA256

981c518986f3006d1df51919b4c7c0c9c41cb228f64c07c442afc103aac350d5
SHA512

b64f1050057f897e037648dc902a338af57ffb98e8d09b1934b7e1260bf4e445b785898da125c172544a8eb7ef701c457a903114f4e8e690d7f505983b2cc667
SSDEEP

98304:8rW7mA/PVO3B5Pv9YLF6KqVtWI0Ch8oNdpp318HJpmv/u:3mAc3B5PviLFcj0ChvNdppl8Hinu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HA-AdvMP3Conv_v4.03/Setup.ExE

Files

383a95e63d8bac05dd743eee52ffe8df_JaffaCakes118
.rar
HA-AdvMP3Conv_v4.03/Setup.ExE
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.S2C
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.FzH
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HA-AdvMP3Conv_v4.03/新云软件.url
.url
HA-AdvMP3Conv_v4.03/说明_Readme.html
.html
HA-AdvMP3Conv_v4.03/软件说明.txt