49bfb23c943ec584280588eb0154ae06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49bfb23c943ec584280588eb0154ae06_JaffaCakes118
Size

735KB
MD5

49bfb23c943ec584280588eb0154ae06
SHA1

c3c78f06b4e4b1ea92c224cfd331807252c4d448
SHA256

22effddc6fcb3635cace1979618ba52ca11bb2eb3039aff6e60bf1b6bed9b8e1
SHA512

eb9cb5943f44980984ac406a46d937cddd174d1a05344970e1c7c1b6bf8ee0891c475bd4538854f260bd251d35e30b03b855078b4cf8e45fc8de31769538dc58
SSDEEP

12288:fbbUmGaFCCoyqgk8yAz2KEn8HWgYiFNtJQkZZScZmSQzwZzm6RDFk9zS:fbbU5m3Hy1kZZScZmPz2zm6CS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49bfb23c943ec584280588eb0154ae06_JaffaCakes118

Files

49bfb23c943ec584280588eb0154ae06_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\baofeng_assistant\trunk\bin\Release\Uninst.pdb

Sections

.text
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE