c02f8889af2830cc36c2902b31eabe16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c02f8889af2830cc36c2902b31eabe16_JaffaCakes118
Size

4.9MB
MD5

c02f8889af2830cc36c2902b31eabe16
SHA1

99af371d8187a80ea26618c5a542e66fba0a93ef
SHA256

f97a1097ec3aed8e660f3a91e7609c5986e4d11d7f70ff94c0648e1db5316475
SHA512

af7157fcfef7097fc751397d1c857ba2a9437a9f8769bbe8c66c4ba327eb679dd678df53ee169cae8363fcb6e4f5e11948a72c05d9ede3a337ad00cba084e0a6
SSDEEP

98304:py2nKcQFQMEQ8iQpySLdpO7/BfSmSa+MId06PVAe02PsuKe9uFl2Bc:SbQpRiD0pO7pfqJVAb2PIl26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cvery.com/Crack/Keygen.exe

Files

c02f8889af2830cc36c2902b31eabe16_JaffaCakes118
.rar
cvery.com/CodeSmithStandard-32.msi
.msi
cvery.com/Crack/CodeSmith30.lic
.xml
cvery.com/Crack/Keygen.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.textxc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cvery.com/下载说明.htm
.html .js polyglot
cvery.com/非常世纪资源网.url
.url