5f0272447604ea9609213d168dd9079c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f0272447604ea9609213d168dd9079c_JaffaCakes118
Size

142KB
MD5

5f0272447604ea9609213d168dd9079c
SHA1

2348931329da4c56c36b35b6b78d3ea10c9ad649
SHA256

2c9ae3b7e2f2aba9661f3e0c53c7a3fe21c6ce07860c5011616eb423734fde39
SHA512

36db840c62638dcbd1ed7aed2ed57cc68ab95bb42dc4403735cb9c4fbd3abc91e0c9a14bd90ee3d4a8e6272827dae4b6fe3838c507d264974c6f1a915ed33710
SSDEEP

3072:o0xHO3SlpuREioLZ0+J0v4bH5fTgCFGat4qaYf8mJof/2yUlzcKS:9xHLL9H5fTgC4at4qaJmJDyUlzNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mp3Phone.exe

Files

5f0272447604ea9609213d168dd9079c_JaffaCakes118
.rar
Mp3Phone.exe
.exe windows:4 windows x86 arch:x86

820ab24e53af2dbafc74d24f87e40262

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

comctl32

InitCommonControls

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 102KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.love
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url