a891eb28f9f6c23b3428d9d8e117a1eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a891eb28f9f6c23b3428d9d8e117a1eb_JaffaCakes118
Size

1.4MB
MD5

a891eb28f9f6c23b3428d9d8e117a1eb
SHA1

c35f31b693e5f9946b661f825a92ebfa2012901c
SHA256

533d9c50fc92bf4dc8da51f36ebdb36b759ae97139672edd5267549c1fb64199
SHA512

de63e72663f625590f079332fa35ff689cab1c0c90b433f3ed33242dae8a2c8ffe698b1f4a2eaf238f53313960ef7c6a7c3bdf73e8f6160437064b4e341ef663
SSDEEP

24576:0SbgBCBzEDo3CanRT/ek/tbgvxScsAElFbY35NiwHKDtJI1rzq8I1y5zRnISG:c4BzrCaF/NEooElFM35NiwHKJefUypRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ss47try.exe

Files

a891eb28f9f6c23b3428d9d8e117a1eb_JaffaCakes118
.rar
ss47try.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot