494f4576f570a6b7f288efa6faf31a14_JaffaCakes118 | Triage

Sharing

General

Target

494f4576f570a6b7f288efa6faf31a14_JaffaCakes118
Size

36KB
MD5

494f4576f570a6b7f288efa6faf31a14
SHA1

5a1114af7cd0423615a0ab8e21e0fe8bcb75bbaa
SHA256

19f7d17bb863c1d331b2d756cc45d6da829cf3973a671e0ae0c9767ee56cadf2
SHA512

29a35a4b78e111bc9394feac387adb182c3401c051ec75467d488b48a58469f65ad728f4ebc1e55fdc011d55b4a231311ce42559e08cf2138722d9d734a8f0ea
SSDEEP

384:9+zgdnVZ5xRc+IlgrsYqfZzifnOcxsDxI/dr:9UgdnV3xa+IlqrEifnFZ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494f4576f570a6b7f288efa6faf31a14_JaffaCakes118

Files

494f4576f570a6b7f288efa6faf31a14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.RIF1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RIF2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RIF
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE