49a76eb93f1321d9104b4c79778b8ffd_JaffaCakes118 | Triage

Sharing

General

Target

49a76eb93f1321d9104b4c79778b8ffd_JaffaCakes118
Size

7.7MB
MD5

49a76eb93f1321d9104b4c79778b8ffd
SHA1

ea83cf9c16307b262c8664a0f9938221fbbdcf26
SHA256

5cf22cc07e51b0d45390b31f29f7b70c2d7b053922acb4f86f211cfcb9254532
SHA512

d296f347c99ca19428b724449b9cb6de19f5d47f68b40534d27dfc902374b0b1bfaaace9bbfac6caeba0ac50c249c8ae652174eed60ab7db9d15cdd6d776438b
SSDEEP

196608:LYWZrUVoEzI0VGvhhVAbHnBeehJXNDDdXQ:LYbVoEMrhnAbheerXNVXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49a76eb93f1321d9104b4c79778b8ffd_JaffaCakes118

Files

49a76eb93f1321d9104b4c79778b8ffd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 708B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 70B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ