494e3c340a98725805ba6101e627d389_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494e3c340a98725805ba6101e627d389_JaffaCakes118
Size

97KB
MD5

494e3c340a98725805ba6101e627d389
SHA1

d5b6f2723df5269f66aa58986240bc9569de1585
SHA256

34d9c8994ed3a2efffc582f901415d3b69deea618d9d35234269c976bff86a7c
SHA512

e15563b38a4f3d91754e15d5fc51c48544674281ff1cfd35207521b73ad8337c5881412a1d38ac981591c6b776cc9266ee1f59008e197fc5d20ec2ae881b058d
SSDEEP

1536:ubqt7FkTlaWJ/2Ay8GpujTNmZetOMiXADYFgGBL8d33oV:ubqilaWJ/2Z9pujT0YviXADYFg0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494e3c340a98725805ba6101e627d389_JaffaCakes118

Files

494e3c340a98725805ba6101e627d389_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE