1298f809fb2f023a96e9d003a1cbce27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1298f809fb2f023a96e9d003a1cbce27_JaffaCakes118
Size

27KB
MD5

1298f809fb2f023a96e9d003a1cbce27
SHA1

ac44b774ee09215b10297e4d211cd6b43bf5cec1
SHA256

cc1285060e20200003094d3033adaa59bf7fc25966a621ce4a4775992edb5373
SHA512

e0bcd87d0168eb2bb373884c701b1b80bd8414bedb28e7bd7561c4a7fb76379aa3add97b4b66d7be01c96c80a24f013a99d1042b8d2c732f85a12e713223fcf9
SSDEEP

768:YmNlX3fxmVtzskKSLVzdGm7M0D7vMQvmR:z3fQQkKSVHM0nvMAC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CorelDRAWx4stysbd/CorelDRAW X4 视图样式补丁.exe

Files

1298f809fb2f023a96e9d003a1cbce27_JaffaCakes118
.rar
CorelDRAWx4stysbd/CorelDRAW X4 视图样式补丁.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CorelDRAWx4stysbd/XP系统之家.url
.url
CorelDRAWx4stysbd/使用说明.txt