374482cbcf86938c102f49b5776944ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

374482cbcf86938c102f49b5776944ae_JaffaCakes118
Size

489KB
MD5

374482cbcf86938c102f49b5776944ae
SHA1

02c5ec0feceb5279b80ceaf3dcb776b98517090e
SHA256

3f6025d5d14c8bc91631070848fee4d0a6bb91b264b19becb1f5c7d16a3be117
SHA512

5bde72af3e84a1ff205f359607a2814c3e3871ab7c9f9126bd4ee44d6cae0b81ea58b8745c137505c3976a2abc1a10ea9cfc6d75fe3402649d54e0fee47dccdb
SSDEEP

12288:mXPIHknSM5nY7N86lB5MEQlcr2DDO1uw/:mXAESI0q2B1R4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/kabakeyJJ.exe

Files

374482cbcf86938c102f49b5776944ae_JaffaCakes118
.rar
kabakeyJJ.exe
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 941KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
readme.txt
安装软件.bat