428438756296ea95d1d0d11e2e05d318_JaffaCakes118 | Triage

Sharing

General

Target

428438756296ea95d1d0d11e2e05d318_JaffaCakes118
Size

1.2MB
MD5

428438756296ea95d1d0d11e2e05d318
SHA1

f4464f936b377b9ad572967acb75ba1fbddd1052
SHA256

c4dfee706b17d0bf910e925c184668c0ff12e3df45fadcfc00fe017c8479de68
SHA512

772a206254dfa0fa41c69f71868ebff46f38269a194d14fd7c76c8f4ec7e95ec64b26a5324b6f393d3ef5b638079251a982ba1eab8b29e12723f064e77500a75
SSDEEP

24576:+rdshrVcmxwb53VayTTrLOLVGOgSQe1QjXgKgplziyJd1FnSgkg5ncBJa6O:+rShZcmxA58yzLOJGOgs1Q7gKoUyJdbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DNA_异界秒杀7.05C.exe

Files

428438756296ea95d1d0d11e2e05d318_JaffaCakes118
.rar
DNA_异界秒杀7.05C.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
说明.txt