a151655f55608b4278d82abf3696aa07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a151655f55608b4278d82abf3696aa07_JaffaCakes118
Size

645KB
MD5

a151655f55608b4278d82abf3696aa07
SHA1

a533fc5fa6e5497808fa3513a95b7b98c7eba4c2
SHA256

12e6da3fdb2c10ec4009f78a107e4ccf9861704470abb5a7ece6208eba00590d
SHA512

6c36f876a6436bb2ac9dd5e2a1d8bdb7454f6e623e600d409afd25503e25f5f5ef8beca2e255248787d1f129a0065b472358962d126d1f2b0d012f7dfb200ecf
SSDEEP

12288:QP7jak1OQS3TpEbPKm3VEpps+DxicABiW54i//Hdf8GTErGBQmt:QjjR788Ew+DwNl54i//Hdf8G+mt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/usbjkq/USB监控器.exe

Files

a151655f55608b4278d82abf3696aa07_JaffaCakes118
.rar
usbjkq/USB监控器.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
usbjkq/config.ini
usbjkq/新云软件.url
.url