13d8cbc290a08bc607602778200e54b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13d8cbc290a08bc607602778200e54b0_JaffaCakes118
Size

1001KB
MD5

13d8cbc290a08bc607602778200e54b0
SHA1

1b710ed86857d2009fef443d75e617843c9b2241
SHA256

abb522726bedeb4d8e646f779d54dae39e889300303da6162899c5299ca7ed2a
SHA512

5f5d99802296c10dc1243b4b450f9da68fb2ccc27301f026aade83caca9fc6f001d0020a32f5620d82ea60ea212875043348f26b4f4025547f1307926a65c665
SSDEEP

24576:PLD/YCkEwBbR6Mu1Q8m54q+gtFeMpBRdGU7w8sfrti7YIs:DUCkvM1Qd6gtFeMR46wlrti4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/街头篮球八宝/八宝辅助0718.zp.exe

Files

13d8cbc290a08bc607602778200e54b0_JaffaCakes118
.rar
街头篮球八宝/下载说明.txt
街头篮球八宝/使用说明.txt
街头篮球八宝/八宝辅助0718.zp.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 813B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
街头篮球八宝/在线购买外挂卡.url
.url
街头篮球八宝/外挂论坛交流社区.url
.url
街头篮球八宝/查看最新版本.url
.url
街头篮球八宝/破解补丁.reg