f0569b7d65dfbf1063413346ef6f5c6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0569b7d65dfbf1063413346ef6f5c6a_JaffaCakes118
Size

65KB
MD5

f0569b7d65dfbf1063413346ef6f5c6a
SHA1

271e394f921ff2be985ba6ebf97f10470bd74579
SHA256

380676fd416546dc0b4e50eb08b17bdc75772ccc7fdfeeb5a5402207c52cafaa
SHA512

ade5522651578a337736fd2b9150d83fda5e6e49b89b5fb6b50ec541bc188230e58e05dd19d07b007c1db3278f99e374b8478a57e7bf31faa67bbfd97e9333a7
SSDEEP

1536:7LHhnn/ks7mbIIUEepgG8Dn4WuWoyIIzmytw4+yT6DObz7:XN/ks7mb/Gg4vhyZCUw452ObH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3389服务器强行连接器/3389服务器强行连接器.exe

Files

f0569b7d65dfbf1063413346ef6f5c6a_JaffaCakes118
.rar
3389服务器强行连接器/3389服务器强行连接器.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3389服务器强行连接器/使用前请看.txt
3389服务器强行连接器/欢迎投稿.txt
3389服务器强行连接器/注册软件.reg
3389服务器强行连接器/说明.txt
3389服务器强行连接器/黑羽基地.url
.url