0ade56cc3f973d4c2e7441cecb390556_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ade56cc3f973d4c2e7441cecb390556_JaffaCakes118
Size

455KB
MD5

0ade56cc3f973d4c2e7441cecb390556
SHA1

b2b97768f1eff7d0109ceb036bbfd7439aea5a12
SHA256

dbdf87b961f4ed3f78a8b5001305b9a03607e89a07973f51d85146bb132ab432
SHA512

b64613d6495753ee5b516f44b5312c5634d4f01b8f2d8509cf9a9466e13c5bdcb550e754bf1a4cdd23f09c50411c8d1bb4eb75373d55f8a900ec2662a23c4d72
SSDEEP

12288:hBmOTJ74YTxbrAa2qIMehX8uJPbP4YtU/U:SOTF4uAa2qxehXX5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DNF淡忘1106B版/DNF淡忘1106B版.exe

Files

0ade56cc3f973d4c2e7441cecb390556_JaffaCakes118
.rar
DNF淡忘1106B版/DNF淡忘1106B版.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 529KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DNF淡忘1106B版/最新说明.txt