3ca26337938318a92bb442873668920e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ca26337938318a92bb442873668920e_JaffaCakes118
Size

7.8MB
MD5

3ca26337938318a92bb442873668920e
SHA1

d837e8fa610ca0f7fabaab932f905f751e031d29
SHA256

99dd652e299ee01c0558da9df7a19fbce112c390f6f9eda549f40e34ec83f110
SHA512

07346694f760216cc6bb092e8226f30ea6a36535b13f8a8ac99469823f94a01880e2b844616c109babea83f369b3ffe5b35add53dcaaf3e63d95af9d4eb7ce45
SSDEEP

196608:zF7If3X2VtdsI7AlFoFWQfwQu9iBAhF9D0OVp1svEvfd:zpmHIdn7Al2FFfwR9ZnoEvfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TheGreatSeaBattle.exe

Files

3ca26337938318a92bb442873668920e_JaffaCakes118
.rar
TheGreatSeaBattle.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url