0f4bb8ef64421278224b68ef08beca0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f4bb8ef64421278224b68ef08beca0e_JaffaCakes118
Size

582KB
MD5

0f4bb8ef64421278224b68ef08beca0e
SHA1

b2cb4b85e3519810a84a9aa2984af3b1d0f06171
SHA256

c50be90204c6a458772117dc435552b1b97745ebd48dfba15dbf8a73d57c5533
SHA512

7b868f13a0634c7b7ffb3db5fc05433ec526d14ad510d8a45c49f767d7494decb127f3989a3d180ea30b6c24ea0e4032440f549cd3dca66778ca5e8c6b628bfa
SSDEEP

12288:9hUeAt1Pvs2XvBZHpE+AltzdxKxfnbMy1iTU+AUYUXxknXSKl:fKPvs2XvLq+ItzeZb8sUdxkXSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Piccure破解补丁.exe

Files

0f4bb8ef64421278224b68ef08beca0e_JaffaCakes118
.rar
Piccure破解补丁.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 579KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE