d336ee0030b29ae0087cbd96ccc485d8_JaffaCakes118 | Triage

Sharing

General

Target

d336ee0030b29ae0087cbd96ccc485d8_JaffaCakes118
Size

57KB
MD5

d336ee0030b29ae0087cbd96ccc485d8
SHA1

fa76d9621f99c519694d2f92e531e6d6e8559aca
SHA256

ae9fe9802ad8e5b0233914f9a3892f7e33f3c45a708d4257390b8c220d1f9620
SHA512

099822427054a2ded94274644a3be7673eea96b568a7f05dc22dfc0fd044e247ecdd6ec067a1af1db6b2450f12f30e60d67d50c8358d2a6638133e4f18803622
SSDEEP

1536:aaRLgwa0BE0RcaaghGT/ilProa2PAVexv4:lLbBhRn3ia2PcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Crack/Patch.exe

Files

d336ee0030b29ae0087cbd96ccc485d8_JaffaCakes118
.rar
Crack/Patch.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.ARN0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ARN1
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ARN2
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Crack/下载说明.htm
.html .js polyglot
下载说明.htm
.html .js polyglot