ab3f6854577059670b9b689ade509211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab3f6854577059670b9b689ade509211_JaffaCakes118
Size

608KB
MD5

ab3f6854577059670b9b689ade509211
SHA1

40f3dd6ddb7b24b2370f4e54c7889924b0efdc04
SHA256

6b2c251a5cfbf82111afa1cc17a3a0a09925067b5c50e8391f51b2dd75aa8d2a
SHA512

6dd385e86fea6215ffd72ea387db16a3e44dc749ccd3c989845e6e727cad9e1a4213ea8fc4cf1a29792c1a259c8aa4e829481098dc03a0c42b7fa42596967e75
SSDEEP

12288:9LaYnU11SSTKeG5jI4iqBnfDK7Cn3IlJGPe7grLdNJc5u53:FpUMpjdfe7Cn3I3GP3ZJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cvery.com/Project1.exe

Files

ab3f6854577059670b9b689ade509211_JaffaCakes118
.rar
cvery.com/Project1.cfg
cvery.com/Project1.dof
cvery.com/Project1.dpr
cvery.com/Project1.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cvery.com/Project1.res
cvery.com/Project1.stat
cvery.com/Unit1.dcu
cvery.com/Unit1.ddp
cvery.com/Unit1.dfm
cvery.com/Unit1.pas
cvery.com/Unit2.dcu
cvery.com/Unit2.dfm
cvery.com/Unit2.pas
cvery.com/friends.mdb
cvery.com/下载说明.htm
.html .js polyglot