dc27e760070219a45dddadd506ad5f4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc27e760070219a45dddadd506ad5f4c_JaffaCakes118
Size

1.5MB
MD5

dc27e760070219a45dddadd506ad5f4c
SHA1

b2235a3a2051a5892c8d83bf4704e01a54663a8e
SHA256

d94792d54be741bb77fb2cd4d7d97e2705bc44b091db6d4bceb0b86d6f5083b0
SHA512

7d14ea9ecf57c77d750930d2170e2b9e56a4a28a71ddd84a208c0a15d8184b19c80f10b2e3bc4678caa4a6c775fdcfb3fa2bc32a8d6f88de36f05d0f7d523ea0
SSDEEP

24576:aRuVkw2WcxVNy/sqpeDInIpI/ba+bE8RWz51MpyeMewexUvD4DqwXN:16RPI/peDICFfHt1MpyeMewz8WwXN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HA_RamSmash-v1.8.13.2007/ha_ramsmash_cz.exe

Files

dc27e760070219a45dddadd506ad5f4c_JaffaCakes118
.rar
HA_RamSmash-v1.8.13.2007/ha_ramsmash_cz.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

S2C0
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

S2C1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.~s2c
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HA_RamSmash-v1.8.13.2007/ramsmash.jpg
.jpg
HA_RamSmash-v1.8.13.2007/swiftdog_se.md5
HA_RamSmash-v1.8.13.2007/新云软件.url
.url
HA_RamSmash-v1.8.13.2007/汉化说明.txt