49170ad386620c57ace2ebc6235bbaca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49170ad386620c57ace2ebc6235bbaca_JaffaCakes118
Size

3.7MB
MD5

49170ad386620c57ace2ebc6235bbaca
SHA1

87b309d3e74ccf5f8bb2e1af868b6450b6078db7
SHA256

6c7988032699c002c5a54e5c7e7f0a0bdec066c798cef6d66b1aec02632a5c55
SHA512

808eef7f875f6275874a121e6b5201b4820302aa688899ca1687953494d000bf4fdf3e94ca59c33f073a9973c7857699f9ee76ba281bf309e7450c4807fa617f
SSDEEP

6144:jS44f8Zq13DauhJMCvLZSNsu8xEHHa4OFaKBGj:W1qq3AeZSvtnatQKBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49170ad386620c57ace2ebc6235bbaca_JaffaCakes118

Files

49170ad386620c57ace2ebc6235bbaca_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ