36f646cab03333fb95f19ec07e8de210_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36f646cab03333fb95f19ec07e8de210_JaffaCakes118
Size

204KB
MD5

36f646cab03333fb95f19ec07e8de210
SHA1

ba44cce4c4a6ab05ae5446a14c4de570f2a8ec8e
SHA256

bbca989d163fa6a660b4569cbbc71d44fd442eb3af0f6aa703f2ec33708a393a
SHA512

d95fb429cf1fc75044435a2d4228b5f538e55950682c07b333f91d60446c2b498842f138c1681dbc595f3847362f7c3c2c46db3e8d3cd17a3a516cb47adf6746
SSDEEP

3072:Z6t69jIQZwQCpK2vLQ1J8ubBsGChQYvB2jxgFMFIx69wsiDkkCdu7t9tU60Re:Z6t69UYKLerNsGO72FRqbBU+dUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RecordDemon/RecordDemon/RecordDemon.exe

Files

36f646cab03333fb95f19ec07e8de210_JaffaCakes118
.rar
RecordDemon/RecordDemon/Config.ini
RecordDemon/RecordDemon/RecordDemon.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

yC
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RecordDemon/RecordDemon/set.ini
RecordDemon/RecordDemon/下载请看.bat
RecordDemon/RecordDemon/使用说明.txt
RecordDemon/RecordDemon/宝贝鱼站长网.url
RecordDemon/RecordDemon/宝贝鱼论坛.url
.url