dc15e08b1b800ac68528afb97bb30f5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc15e08b1b800ac68528afb97bb30f5b_JaffaCakes118
Size

1.3MB
MD5

dc15e08b1b800ac68528afb97bb30f5b
SHA1

83305fb66c2056ab9ca7e2d64a6c9e8cfaffeacd
SHA256

57f9f2ed8c31814a048ea55a1b622e3ced609d2f43b4142ee4b6d608092ace29
SHA512

31eb1fe2d969835a8a8ebf5fbbf40015e287792da8c8074f863bf2e3a35ee4c82a4bda7d50d2f1ca6810b739fa0593418fe6d778820cbbbfeef54ccbc64432e8
SSDEEP

24576:5ZfXnNuMbsqPWcHKq07j6D7odk93K/C0iLqOqNDcAI1o3FsQuVTgvRmzOodHaP/k:L/4MbsqWcHHDcdk93K/C0iLLWDcAGo32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/zzdszbgj/Mdist直播清爽版.exe

Files

dc15e08b1b800ac68528afb97bb30f5b_JaffaCakes118
.zip
zzdszbgj/Mdist直播清爽版.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shoooo
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zzdszbgj/下载说明.txt
zzdszbgj/官方网站.url
.url
zzdszbgj/帮助.url
.url