957e61031447ba1e930e55d5beb4dd9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

957e61031447ba1e930e55d5beb4dd9e_JaffaCakes118
Size

912KB
MD5

957e61031447ba1e930e55d5beb4dd9e
SHA1

576d02ae92572ea564aa33bc427eea69a0397902
SHA256

ac14745a7de6ef5b30d116179089147d1ee6d27029ac714df33830a045d70fe3
SHA512

169811eed14b008244027f7df2aa64eab7ec2c7363cd4db93d943b948412e497e3ebec5ff74d89f2392d757735d02c7fa2a27a29d7a86bae73d889d5a7e6404d
SSDEEP

24576:U9+1mmC1Sac/+yUuBcR/blr2Ks9a5pEL9Jk:2+1a1SachUuWTlD4a5pP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QQzonePL/QQzonePL.exe

Files

957e61031447ba1e930e55d5beb4dd9e_JaffaCakes118
.rar
QQzonePL/QQzonePL.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

�=0
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�=1
Size: 912KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�=2
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QQzonePL/个别杀毒软件报毒说明.txt
QQzonePL/使用说明.txt