f05e0bafe36a5262138fdb3255012267_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f05e0bafe36a5262138fdb3255012267_JaffaCakes118
Size

17KB
MD5

f05e0bafe36a5262138fdb3255012267
SHA1

d22bc1de0f2adb7c410ecae97ce2d917c60657de
SHA256

0df9a4b3b69dc2b39b77292e4ff522cfb36cdac90ba4d23769fbdadb0becc26f
SHA512

52f3e7a2ee9b4f867491202130cd9834c02af46c190e2dda58902ee2159696a09b50750b4cff7d639d3b1ec6c5ef8241be8e6921b9f993902c9744e80a688f3e
SSDEEP

384:sP+RmbHn38hhQ51gsGDYNBonJfFEFKu+NLUJf92iXDbs7PlYqAQRR9a:YMoH34K1UYzo8FzjzeJ/9a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2006941950330/注册机.exe

Files

f05e0bafe36a5262138fdb3255012267_JaffaCakes118
.rar
2006941950330/Readme.txt
2006941950330/下载说明.htm
.html
2006941950330/使用说明.txt
2006941950330/注册机.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2006941950330/飘down精品软件.url
.url