d17dc5767957b43b418ffc48fb8eeb72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d17dc5767957b43b418ffc48fb8eeb72_JaffaCakes118
Size

1.9MB
MD5

d17dc5767957b43b418ffc48fb8eeb72
SHA1

794e590cae6de5b2e592297d37d8c3c34c723dc5
SHA256

7849227460ea5218c3a17f4ea6e51ea3e1f805114cd5ba6cc158cc997067db21
SHA512

060a0bdfce4eb5ce5ac8f4f068e069e31dbf97e21feb4c66086c0fb1027b4881e0f9e185e41f49138c299210c8f809906bcbef93b83b6afeab9bad6a0a18020d
SSDEEP

49152:uqe3rtb9daxCqRBUP1NVE+eBUpeTL4Z/Z9uXqKRLjepk:Cb/docNpev4VZ9uaQ/eC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HA-FlashDesigner-5.0.23.7-SCHER[SLT].exe

Files

d17dc5767957b43b418ffc48fb8eeb72_JaffaCakes118
.rar
HA-FlashDesigner-5.0.23.7-SCHER[SLT].exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot