49a5ef47c028b51a7be8bb29d162ff80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49a5ef47c028b51a7be8bb29d162ff80_JaffaCakes118
Size

807KB
MD5

49a5ef47c028b51a7be8bb29d162ff80
SHA1

39834fdc4283ff0d8a0fb724165dcdeae614bb25
SHA256

fdc771c906f711be7dcb848f85021ac36f37e7c837fa6c77354c0a626b1d20d7
SHA512

264072584c8da226b2c10136735546825a88c4ef77aaa9b5ebbf95f99837ff6d7649170a941d2dd435f1f017024cbf43f7067871cf4a12c3df486b2339d4c24c
SSDEEP

12288:KuXCRP7777sSo9qPJ7mZCJGEU4EVr/hNWzlOoGV7j6bUrroKBbZOKdsoOaC:dyRP7777cYP0yGYQLhNW7yObnKbOKD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49a5ef47c028b51a7be8bb29d162ff80_JaffaCakes118

Files

49a5ef47c028b51a7be8bb29d162ff80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ