8ef1392bd623caa3b96ffcd6ad2bd4da_JaffaCakes118 | Triage

Sharing

General

Target

8ef1392bd623caa3b96ffcd6ad2bd4da_JaffaCakes118
Size

169KB
MD5

8ef1392bd623caa3b96ffcd6ad2bd4da
SHA1

236f1e68ddb003b10618a88b7ae5e6e3dd82c341
SHA256

163d995ae2cb2f42ec3f4aa8b5d0028723560e38894303fe5eff4294b7511671
SHA512

ffe64431313dcc2ea79a9f176d19401c777657b7b09207687980f4a97d929ae0af1ff8a00e4f5f2a4e0476b29ad8283743398d1dc8cf7f7e2bc0cff1966760df
SSDEEP

3072:WzBaUMeZBjTYJ1EXONyfMLfycG0fL5SRIsxj4pHYZQZPJvEfED:WzxZBjTYzbNUMLpGK5SRmmAxcfED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cvery.com81642346624/Project1.exe

Files

8ef1392bd623caa3b96ffcd6ad2bd4da_JaffaCakes118
.rar
cvery.com81642346624/Project1.cfg
cvery.com81642346624/Project1.dof
cvery.com81642346624/Project1.dpr
cvery.com81642346624/Project1.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cvery.com81642346624/Project1.res
cvery.com81642346624/Unit1.dcu
cvery.com81642346624/Unit1.ddp
cvery.com81642346624/Unit1.dfm
cvery.com81642346624/Unit1.pas
cvery.com81642346624/sourcecodechina.url
cvery.com81642346624/下载说明.htm
.html .js polyglot