ad95fdc935d81f78976e96e8e6b39312_JaffaCakes118 | Triage

Sharing

General

Target

ad95fdc935d81f78976e96e8e6b39312_JaffaCakes118
Size

5.4MB
MD5

ad95fdc935d81f78976e96e8e6b39312
SHA1

131a348dce81049369381984fe21ef013efa58e9
SHA256

06d41bcbecdc3c9521f4ca322bb44628dd3009f18465e1ddcb96976337d118c3
SHA512

d4f04d71bcccecf783178a44b770e6e8ced2be3bbd042ff50a283e511a061dcc7737f8d06d9ad3f9a3b6faa65ed1670f0f2056ea1c61039ab9ed7e60fd52e887
SSDEEP

98304:IeZOwCE7KW5O3xclogeQE/kS1g92u7ZdBG/qac0spvGQ8P99:JMwCDWx4/zruPB1aJso5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HA_UltraAudioRipper-v2.0.2008.401/HA_UltraAudioRipper-2_CZ.EXE

Files

ad95fdc935d81f78976e96e8e6b39312_JaffaCakes118
.rar
HA_UltraAudioRipper-v2.0.2008.401/HA_UltraAudioRipper-2_CZ.EXE
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

S2C!
Size: - Virtual size: 640KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Fox!
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2008
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HA_UltraAudioRipper-v2.0.2008.401/新云软件.url
.url
HA_UltraAudioRipper-v2.0.2008.401/汉化说明.txt