f49b78d9afdc8d8def89ee068bc4685b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f49b78d9afdc8d8def89ee068bc4685b_JaffaCakes118
Size

385KB
MD5

f49b78d9afdc8d8def89ee068bc4685b
SHA1

d21245610df97147cd58dc14c89cb670f0642f84
SHA256

8c2566cb30e267f527bb404e0f61e1d06bdc1ff784798340bafe7702dcffee66
SHA512

61e4d02a1a5c0fe28786c0f79e8bd4993f79e7a1a5e3ae870a1cc8af9ddace372c71860bf48be00d796be978fe509425516f925f464f61d0dc62157d8fec6f38
SSDEEP

6144:GEONC0pofdIDjO7/WvFeEq7Nxd+e6q/TG47L/L+Q/WymyFX6Equm7aMB:GFNx2V8c7p+e6qyQLd+p0D8aMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f49b78d9afdc8d8def89ee068bc4685b_JaffaCakes118

Files

f49b78d9afdc8d8def89ee068bc4685b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ