bbdc318423a45047add8133dd029b032_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbdc318423a45047add8133dd029b032_JaffaCakes118
Size

20KB
MD5

bbdc318423a45047add8133dd029b032
SHA1

29d7fb8d6512dbcb0a3b34932a1e6a6bc930fe8e
SHA256

f99b992ff764987b7855b52f349d64232304a2af9272c92d0b1c3745aaf537be
SHA512

21d77664a2465227e2de694cf9fa81816ca0e779d5185aa82fd5435fb9389f983d429181c6766a5ba1ddcb07d5b4f881d94edf8190a4358aa8aec171c7cd45e0
SSDEEP

384:/qbbA2OVeXE48qN4vrl7U5sh19etFvUIMMnel436RbzY9pMBrRhtU:/yxGegqAQshLcel436R3YEB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/kt/QQ海底定时自动开通器.exe

Files

bbdc318423a45047add8133dd029b032_JaffaCakes118
.rar
kt/QQ海底定时自动开通器.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kt/使用说明.txt
kt/运行不了请看.txt