aa045313c52c5673f435bf0fc813d6c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa045313c52c5673f435bf0fc813d6c1_JaffaCakes118
Size

256KB
MD5

aa045313c52c5673f435bf0fc813d6c1
SHA1

ff5477e4976c5d2da1ca465854bcb0a7d9b0b0d3
SHA256

f606df3918cbb60463519f772d11195c0008773897a6cf90b678b78998687847
SHA512

95121915f175a0fad0c94333472e85da8230fd52c76ee07823abd1dcc5c0971f00dfe29c1c8d31073896406a3ed072bef6ec75f478ddbfb05598ca52f693711c
SSDEEP

6144:ZyPcpKkTHDA7ieWbx/WERiLTKcIE+TAeDDJnkNFO:QmH1VZRUT1wTAqDJkNFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/qqhucai.exe

Files

aa045313c52c5673f435bf0fc813d6c1_JaffaCakes118
.rar
Readme-说明.htm
.html
qqhucai.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
qqhucaiba.jpg
.jpg
使用说明.txt
软件使用帮助.htm
.html