049ec7709f990573d55dd5ab87f4f156_JaffaCakes118 | Triage

Sharing

General

Target

049ec7709f990573d55dd5ab87f4f156_JaffaCakes118
Size

190KB
MD5

049ec7709f990573d55dd5ab87f4f156
SHA1

43689b78422c2003674e245ae6f856343aff84d1
SHA256

90db641f6316e15cf12248f1158ecba28e9caac6c11f1d632f0561fa27e2dc3d
SHA512

68525a1bb79148a446035327dcf36c40c25b04973d8539aa0c814df8f81841c6707c1f54def0794dbc42a1566ed70f7b9f7dbd93c984c472a9dd4d29e1e2b0ee
SSDEEP

3072:km771K1BIa0zMFjyCf7PGZBB9aNOagA/SS8pDvg1Ix5dBnTzAaUgliymyrJ1pgxe:to1BIaTBXfrQxaTdUICxNI4lilyjb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
049ec7709f990573d55dd5ab87f4f156_JaffaCakes118

Files

049ec7709f990573d55dd5ab87f4f156_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AcroRd32Info.pdb

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE