dcc4b55176cfc6bfcab7aeddf0d636ac_JaffaCakes118
- SHA256 85f45ed9cf6e64b9587c405e2c61fe7d92cc19bdabf2d874856909f592aa9723
General
- Target dcc4b55176cfc6bfcab7aeddf0d636ac_JaffaCakes118
- Size 1.0MB
- Sample260803-ptk88abj41
- SHA256 85f45ed9cf6e64b9587c405e2c61fe7d92cc19bdabf2d874856909f592aa9723
- MD5 dcc4b55176cfc6bfcab7aeddf0d636ac
- SHA1 a5f79f86f338f42db563213dd500a6278a7651c8
- SHA512 3a9aa863f3baee5a2315a1a647a3ef3fe142a2a9646a4dfb4619818920613c9590b6fd77fc5c52684031091d40f5aa3650acd8bb737e3a36610592b6226a899c
- SSDEEP 24576:delxNouuaORJ/O095FBxS6+Nj/HzUjVhLrIHxkdDVh:delxmuuD7BxS68jHCGyn
- TLSH T1223523AD482F6789F49CF243D54F2A7AA559D30BC543C652B2F682A4F8B12C130E5DCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/yldjyyh/野狼DJ音乐盒.exe upx - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/yldjyyh/野狼DJ音乐盒.exe
File Explorer
-
dcc4b55176cfc6bfcab7aeddf0d636ac_JaffaCakes118.zip 1.0MB
-
yldjyyh/野狼DJ音乐盒.exe.exe 1.0MB
-
绿色资源网.url316B
yldjyyh/野狼DJ音乐盒.exe
- SHA256 485a5454645f5d90d1b3097336b08dcaa9d4b49db9738a2f953e81081002600d
- MD5 18b6865da4d3970fa3c102731ca82d96
- SHA1 39f2dc79978a6bf937aa588998b14ab05b70ff83
- SHA512 b99c73cb74f298e608a66353309fd5cde38cfeee552cb9c05d2a10e237fda421455c3acd7e435040d15162cf871cb425c9f7098ec6dcfbb2f90ee91a3b965486
- SSDEEP 24576:NxloCukO/lRO0L5BBfS6MNv/jzQjThDzILxk5D:NxeCAbHBfS6mnje4Y
- TLSH T1F23533AD882B5F48F458B2F7C40FAA366159D309C143C7A1A6F175A9F8B57C06C91CCE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2313824
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
UPX0
Size
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=5, id=12, version=7291,
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=44, id=14, version=7299,
count=45, id=19, version=8022,
count=26, id=19, version=8034,
count=696, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=1, id=18, version=8444,
count=216, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=145, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=77, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=90, productName=Unmarked objects (old),
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
绿色资源网.url
- SHA256 d247bbfc9eb95617f8850e5129d4f1e87af12f8d12244c80c158600a8e24d2dd
- MD5 e3d6c20a95810df0ee07dfd966c11468
- SHA1 1c605940670344b45094aefadee47c418f47b1ff
- SHA512 13d57250c76c3bce1821fd6055427a430ffd088def7a43dd9e654a3c7fbca510ad0af87b27eb107b5613bfdd6d901320b5fb88b43354595a99a1c7fd0a537ba4
- TLSH T1B8E026184B4ED1E4D103880AA032FD8CAC1E34C058EBCCA862DADF8C2D5200ACB68775
- MD5 SHA1 SHA512 TLSH