3928932fec1e8fa15f7032520ab140d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3928932fec1e8fa15f7032520ab140d8_JaffaCakes118
Size

68KB
MD5

3928932fec1e8fa15f7032520ab140d8
SHA1

dae3895f0b2a2af5e442ba588f31a8f93c5d8af5
SHA256

3887444008d55cd9d96403e16d9d899aaeefc77c774ee4e8e3e09e83c3f97f66
SHA512

127dc09c80f80d8cd7edb79277216fa133e7ba70f8d042c0702ad400bf4f699cbf0ce821792ff581b16785770e329931fbc8c8ebba74867838bfdf2b55fd4ea4
SSDEEP

1536:QUsDfFZvHuUDvSdI+ltQfuZ42TNihfGVr5Z/5qoRN6zFKgtQkKD9q:RsDfTvOUDi/ltes42TNihwr5dz6zFKIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4属性修改器/asx-aoe3.exe
unpack001/4资源修改器.exe

Files

3928932fec1e8fa15f7032520ab140d8_JaffaCakes118
.rar
4属性修改器/asx-aoe3.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.asx-0
Size: 359B - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asx-1
Size: 19KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4属性修改器/credit.txt
4资源修改器.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

aawf
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hrie
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
不减资源修改器/credit.txt
新建文本文档.txt