49750e33eefc5a81c1bcf6cb770a05b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49750e33eefc5a81c1bcf6cb770a05b9_JaffaCakes118
Size

719KB
MD5

49750e33eefc5a81c1bcf6cb770a05b9
SHA1

5e09e20b29d1a78af2c47b879b09b13636e75927
SHA256

3edb0db951fb4bed32e7f6a58f06726f94e419e7ef795c6f994e6411112a5afe
SHA512

9dcb92c656e7967fe1acdf61bb2d8ca04e91c22e3c78809ce4b0e4d5a366bc2e167d076ec86c04869a5383d061481766217e285aad6dee7649671f4d368357f5
SSDEEP

12288:7vdAmTyxEDmOnZo42AzZlXuUZyi3kO9eOCuT6Nv0bqgoqa+64Db3i7U2OrVJ8u:rO0yxECOn91leSaO39Tsv0bBrp27U2OL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49750e33eefc5a81c1bcf6cb770a05b9_JaffaCakes118

Files

49750e33eefc5a81c1bcf6cb770a05b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 719KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE