cf1ab8b9d15a32364c94dfac2b37a1bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf1ab8b9d15a32364c94dfac2b37a1bb_JaffaCakes118
Size

940KB
MD5

cf1ab8b9d15a32364c94dfac2b37a1bb
SHA1

c0e759cd1f4f184f8e11e09dad7f4977632e8f9c
SHA256

e25ab73538240bed5ede6ca8b1eade0d3d49db94cd147130f143f418d9ad78f6
SHA512

15ca54919864e9ccd5cfad93596394c0485a66d6e513c688649f5a0ba5a357707751d31bb4894abc944da9937f1c70d5df0a1f116f9e46717834c2c197253fd0
SSDEEP

12288:fenrOWVhsKElNmMP3D0yAV8sht+3bIvTCP71xWSbmwCPg9eYldDgI5ijA0NLWG7b:UUlNh3Y8shte0vKUVYldDNoA0NzrDf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ChouTi.exe

Files

cf1ab8b9d15a32364c94dfac2b37a1bb_JaffaCakes118
.rar
ChouTi.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 933KB - Virtual size: 936KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url