457b49cdb576bc163e0f148ca21af359_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

457b49cdb576bc163e0f148ca21af359_JaffaCakes118
Size

412KB
MD5

457b49cdb576bc163e0f148ca21af359
SHA1

6da9941cbc628f64d52e86e872d347417c4b896a
SHA256

ea8954fc9505f2f78a6199267f91090ff7dc0ff5b1d0c59740ce9da5e035f0d9
SHA512

88744b19902734335b9873f0fd50a93a1f752c72c0f31a9efd9c33b4926d139e31e5a738ae36cf950497d6edc537ac6f20999e2fbd2565a76f364bf21be1bb65
SSDEEP

12288:9cTj1VSNqzBgp9NeNyS8xCaud4Jcz5cMCPJr083P:STj1Igz69KSVJmeJYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/电脑密匙锁 V1.2.exe

Files

457b49cdb576bc163e0f148ca21af359_JaffaCakes118
.rar
电脑密匙锁 V1.2.exe
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 840KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 381KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
访问我们的网站.url
.url