93c0a880f24add22f2754c94a46d0ccf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93c0a880f24add22f2754c94a46d0ccf_JaffaCakes118
Size

57KB
MD5

93c0a880f24add22f2754c94a46d0ccf
SHA1

97424d96559b9b0a4c3af1544c4f2e466ed05064
SHA256

326d1ac179b2b827ae06edffabc27600c478406a9cddbd86770784fa9a918270
SHA512

e1bae4486a5b0703b5b48fa6324f1e5ab5d39213607b8b84bf728b503be34f407fd29288aa24a9e11ad2a1f1b15a12828cd965f9b78b26086c89d186845554a2
SSDEEP

1536:GZCIe/A2UJrGKXnPl4Y+N+ty0maWUaFc+jlcoyt9okLgAlcHHPHVp:VAnrGK3t4VUto/fxyt9okLgScHvr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/tbpaint.exe

Files

93c0a880f24add22f2754c94a46d0ccf_JaffaCakes118
.rar
tbpaint.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot