85026740138008196e5ff8473ab62b81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85026740138008196e5ff8473ab62b81_JaffaCakes118
Size

38KB
MD5

85026740138008196e5ff8473ab62b81
SHA1

0182260b1b778098ef08a626500abab686df42e1
SHA256

fad6e7760aea61c9298b41b3f66db1154d6ff558ad1485ec307cabea76660a05
SHA512

dec058416d444dbeac7a908a490d5fa3310df8d82a99b1b59a1c9867f1096f80f2e3fe0551e611074c5d05299a2dc7fc3ca386984ad3e5c446593cc296d3c862
SSDEEP

768:lOSUHhBCYrtvwZvTBmthzcS0lhspbGip/uABuMySrmNJkQTw1Y++:cBh5rtvwhtmbcnYgC2A0MWlMp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85026740138008196e5ff8473ab62b81_JaffaCakes118

Files

85026740138008196e5ff8473ab62b81_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

Mingtianhao
anquanweishi
anquanweishit
rrrr
ruixingnihao
ruixingnihaot
ssss

Sections

packerBY
Size: - Virtual size: 83KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 956B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE