02ca592f9c25d7c5516f2dc38e6af968_JaffaCakes118 | Triage

Sharing

General

Target

02ca592f9c25d7c5516f2dc38e6af968_JaffaCakes118
Size

90KB
MD5

02ca592f9c25d7c5516f2dc38e6af968
SHA1

0caeaea35bce58f9ce420e79f61803adee56b1c0
SHA256

6d447570a2e6f7188d6db3f62ffbf4d524389c6d096b7b5fa955a5b857fd49e1
SHA512

ecf7b6d8a20b582d8c884f12e9c663dc9f38d0ba80bddd3bedbdb8c3b30ca41eab2dde208cf256d509d1e6621c56c22607fdb0461f7d421411b3abbe994f4601
SSDEEP

1536:8/7cQ81yoR7d2XMBvyprl9QO/Pbho9F+DdusFWiDHNFSZcHJbK/HA8tgpm0qJVHb:oKBR7d28NyRP/PbAUFFZ50c8HzZvb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/keymaker.exe

Files

02ca592f9c25d7c5516f2dc38e6af968_JaffaCakes118
.rar
dvt.nfo
keymaker.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

b0
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

b1
Size: 85KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

b2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
快乐无极软件园.htm