91dd94ebc43799ad7627769b3262bb56_JaffaCakes118 | Triage

Sharing

General

Target

91dd94ebc43799ad7627769b3262bb56_JaffaCakes118
Size

2.9MB
MD5

91dd94ebc43799ad7627769b3262bb56
SHA1

26ab6dca81b53b98ab245f44d2e859b55b2f2866
SHA256

458915aa05d50d093ac7d2df5b47c9141f91da065edc2f8022f9ba107ec405be
SHA512

2beb7ca98527b48c1f33319c13af5ef51b9fc5aca357db0724533b3239c12276f1502df292c0d653a3fee6e2b09136a545a15dbfbd30edec9657b7e2c39ff164
SSDEEP

49152:dRer51JgjuHzcRZXcjZj4TqrX5ycqsGm4i9x+Ydnr0qHDagWepGC3Gcx3LYdsIFc:ds1yjSzcRdwZj4qJHfKYtQkDBecZsdsJ

Score

5^/10

pdf

Malware Config

Signatures

Malformed data in PDF
A PDF can contain malformed data to evade detection
pdf

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/喜欢此软件_love it.exe

Files

91dd94ebc43799ad7627769b3262bb56_JaffaCakes118
.rar
GB 03478-1.pdf
.pdf
喜欢此软件_love it.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
支持我爱资源.reg