01849cad7aa05f125e89c5e34653957f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01849cad7aa05f125e89c5e34653957f_JaffaCakes118
Size

1.5MB
MD5

01849cad7aa05f125e89c5e34653957f
SHA1

7e48cf339d48e308777d3361d0c35e507c17b48c
SHA256

a402229cb8f967c0bb699db4e002df866cf617c9305a9439a8601647ca179299
SHA512

3f359a5ce6fab64a43273b52d0e9ffaf579b54ea3dbc097e23655c28d9619e2e2074b3d3590e9b352cd5d06d59fd1c9c2d6befd900444716039a8ddfe9641553
SSDEEP

24576:wUawCP6KY/8sjuPQJ6RPBJoO+58mh4+da1ndVFySGMVGjEVxdBva2Fw3JYeY5B1Z:cgbjE66RZJoOvY4ya1pVqc5aAwe3Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01849cad7aa05f125e89c5e34653957f_JaffaCakes118

Files

01849cad7aa05f125e89c5e34653957f_JaffaCakes118
.exe windows:13 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Sections

/text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata�
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r�loc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ