490ad340dd5afc954b531cb25361ac56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

490ad340dd5afc954b531cb25361ac56_JaffaCakes118
Size

40KB
MD5

490ad340dd5afc954b531cb25361ac56
SHA1

d7cbc02125ef0059446bdb072d89e591541693e9
SHA256

09897197fc640d48c66a50955c3aaf36449bb1d01b65ac2b12178e25daf06199
SHA512

4950e7f4d9d6cf63a1280f738b749ee8fc0b85b43ec00288583768f64b01a89c0fae378a277dbc3cbd3eaaa30cb066101a86d5cf755c4e706a31125b5a77a5b4
SSDEEP

768:4qSwYqVQew2GkcDsUZ0puPp9O9z9cFHGtt+Bw4qtybR8Mm78xe:49ZqVQbN4U2p79E+mR8Mmoxe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490ad340dd5afc954b531cb25361ac56_JaffaCakes118

Files

490ad340dd5afc954b531cb25361ac56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ