06da1ea6781330a11682325fc7acc886_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06da1ea6781330a11682325fc7acc886_JaffaCakes118
Size

4.3MB
MD5

06da1ea6781330a11682325fc7acc886
SHA1

5dcadb3ceaa2c2a72d6aad5fee81065e2e85e061
SHA256

af87d2de363fe718fc4be7185343e1c725680e993d53ff666b5866049161b368
SHA512

e9df97fcb6684118c859a0721c05c8ec0433dd9c80ac91703af50341794a173a3879fb20ae33c0aec1c03d7c23b6e75298dec48ce46f123fdecd24838c0c203b
SSDEEP

98304:IJmbd5WncsOTwApYvUn55TkOz+KCrspOoZdNQjvJC:IQZGr8nHTkgmrsprEvJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/qqpinyindzzj/qqinput.exe

Files

06da1ea6781330a11682325fc7acc886_JaffaCakes118
.zip
qqpinyindzzj/qqinput.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
qqpinyindzzj/԰.txt
qqpinyindzzj/԰.url