d2e9ae9d2fd2ad61c671a6185951d14b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2e9ae9d2fd2ad61c671a6185951d14b_JaffaCakes118
Size

7.3MB
MD5

d2e9ae9d2fd2ad61c671a6185951d14b
SHA1

b59c7ad21c8b09f7f4501ad1870460b8b886d300
SHA256

90c3a13531d2365c34c5ccfb59949623c2c618f863ea2a976a39c0e2806d0754
SHA512

bbb9ff8a8589643277ad05b73c439e59a56eea996a9eefe7d40aeb197084d8528750c72f9829d2cdbc55f31cb774426b90c11f9ea330f3f53af320b63ab3fb02
SSDEEP

196608:fhP8+P18zkBS77gtMGQB5wkNI2qNwjjihh:v0kYEtazI2LjGH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ssbx-2011b12.01.exe

Files

d2e9ae9d2fd2ad61c671a6185951d14b_JaffaCakes118
.rar
ssbx-2011b12.01.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url