15d3fb2c39cc500984e389459b21277c_JaffaCakes118 | Triage

Sharing

General

Target

15d3fb2c39cc500984e389459b21277c_JaffaCakes118
Size

202KB
MD5

15d3fb2c39cc500984e389459b21277c
SHA1

7504fa0b69ef5a34bbce9a46efe8337e16388b8b
SHA256

fccb6c87d35a70b0cf3db501307d3da850ed8b71698c971b76f4413457aee74d
SHA512

659c7589131bd71b5ea423f3a9ac66542ede3d743433255e9c0c0ed849e0fe5d6f90585dc74c18f7b89d4d86413e6a80ca6357c647494a4bae7ef3ef94e8d698
SSDEEP

6144:L0C/hHomPLJRPK+KZhKODKtddU23H8ONPuDBL:oWhHNLJRuZk4KtDU23HPuR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/热血三国辅助(辅助点击)V1.09 绿色版/热血三国外挂破解版/热血三国外挂.exe

Files

15d3fb2c39cc500984e389459b21277c_JaffaCakes118
.rar
热血三国辅助(辅助点击)V1.09 绿色版/热血三国外挂破解版/游讯网_Yxdown.URL
热血三国辅助(辅助点击)V1.09 绿色版/热血三国外挂破解版/热血三国外挂.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shoooo
Size: 201KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
热血三国辅助(辅助点击)V1.09 绿色版/热血三国外挂破解版/说明.txt