82f06ff3623ab2fefc3389a2588bb345_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82f06ff3623ab2fefc3389a2588bb345_JaffaCakes118
Size

833KB
MD5

82f06ff3623ab2fefc3389a2588bb345
SHA1

4f83844be12e0d27e6adf9c6be5e36b47f72d946
SHA256

a5df0ed34c92a198295c364b0a92625305841d8d074b1936fcc80c2eb3fff034
SHA512

790501c4bcbbd94ef57a37840b65790ae64ad31ae4a553b531898ccae97cdcf3abca00266c8dd9dec0f3eae9c2627f9bcceb52f6f7530494d895e60da334ecb7
SSDEEP

24576:dn3hxvY3QHIf7Q8/kFE7lwGfa993HiWbkr:dn3h5EQHGkFEuyaaEkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/protector.exe

Files

82f06ff3623ab2fefc3389a2588bb345_JaffaCakes118
.rar
protector.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot