49d49186988ac698275d22665213e118_JaffaCakes118 | Triage

Sharing

General

Target

49d49186988ac698275d22665213e118_JaffaCakes118
Size

557KB
MD5

49d49186988ac698275d22665213e118
SHA1

4e279600b2cfe8467b30648bddd6bc76cf147c05
SHA256

05a1dfb778847f58ceab210831865c8878c31e352b7440862bcffe00d13d4bb9
SHA512

3721d03fb4ef088801219f4669280a1e0c33e36fb17e3da712aa95737d9c102d11425319ba436fb6bdc19eb9eac6d012f2b5c7aefb4b67b15142bb7f22b232f4
SSDEEP

6144:YTOpZE89qT02vbGvHClJINpexiP2ZGn92hI0MXA8C7qzNVx/k6lBCVycLCf:yGXnug92+0gC7qZVQYcLa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d49186988ac698275d22665213e118_JaffaCakes118

Files

49d49186988ac698275d22665213e118_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\clientci\workspace\bdkv_v2.1_fix_compile\basic\KVOutput\binrelease\BDKVWsc.pdb

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE