d73f473b65b1882351521c4940301836_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d73f473b65b1882351521c4940301836_JaffaCakes118
Size

817KB
MD5

d73f473b65b1882351521c4940301836
SHA1

fed9911307b38415a8cd1895c90b2984d7027507
SHA256

f01ac4928cae856f612cd7841389e90d01e13036f417adf84f2938ba688861da
SHA512

03684ed13456d2d8128b865755984de49152f606c5db33fd394012df677d1e0163d75faf4c75de9202f906050639081388032668aae78943d93d0c0ac41128cf
SSDEEP

12288:IgAZR+4dQV1/SN+Z274JXd2awumnNzIoHNidJNr3gF8NPqEtJytUH13vcbYFEuSE:IgA7+4dQV+D42awJNyN8F8Ni0IKEYOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Oem7F7.exe

Files

d73f473b65b1882351521c4940301836_JaffaCakes118
.rar
155绿色软件站.url
.url
Oem7F7.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

OEM0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OEM1
Size: 804KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Q&A.txt