7840a9fb99d8514aa0e5b170534fc638_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7840a9fb99d8514aa0e5b170534fc638_JaffaCakes118
Size

173KB
MD5

7840a9fb99d8514aa0e5b170534fc638
SHA1

e2e05d605670227876e59073111c95d15349af0b
SHA256

850a84cb9fe22260a1537bb7abc1bf1100f6d3f122b4c8622130a6fd39f12132
SHA512

797d908c19e5405217a02a81ec7c0b76aee397f79a168dd01377744ef2fb6dd9de6f4807ba7afee2e20ea7a33bba1240968ff884c2db850aa3ad7038e839b1c5
SSDEEP

3072:/86z2+iUzewVoBTXinqF4OlHbn4k5cDLlyQioh40z+kt/EUMWobcZA7f6:/X2f7EogOl7n4k5iKoXxotT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mulping/mulping.exe

Files

7840a9fb99d8514aa0e5b170534fc638_JaffaCakes118
.rar
mulping/155绿色软件站.url
.url
mulping/mulping.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ