49a6438f01150fc7d18c96b5de655b4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49a6438f01150fc7d18c96b5de655b4a_JaffaCakes118
Size

701KB
MD5

49a6438f01150fc7d18c96b5de655b4a
SHA1

a6096288cca362598b4a7cc7658c8abe087aa1e7
SHA256

5cfc762383586015343e173e750bb65b836633a63a16a476902a11ebd975c00d
SHA512

ed8926106c8a280eb20be8c07a6fe0b28ee6e9c75bba95aae074d471e2f826c6a70f67badefc7cb316a4c01ddd6b2e25a6a92ab291f558191dc6071b45bd09b3
SSDEEP

12288:2GcoX5oWf/LY80pUX4DwJ2+B05OEkz4+WqEe4/sVOi:IaZfTgk4E4+O4lz4FeL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49a6438f01150fc7d18c96b5de655b4a_JaffaCakes118

Files

49a6438f01150fc7d18c96b5de655b4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ