49d8860d8051f4eeda4eb19fa200e44f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d8860d8051f4eeda4eb19fa200e44f_JaffaCakes118
Size

256KB
MD5

49d8860d8051f4eeda4eb19fa200e44f
SHA1

1cba1a5872925e12d6d5d0e45f2adff1feb538aa
SHA256

1978e93188f476bcd7d96ecf54400b515a0eb4c090eaba6b0871093e9ad4fa94
SHA512

eebd8894e6470f11d085d68efc657236eab6636ad61194e20565d943e25bec7a0c388b304866b62586314d469ef2103bc336d04ce343f4b0dd8681f9769c5f10
SSDEEP

6144:u8pirC5qmKLG+oWo5uexF6c3YNQMZqcOw:u8piO5q5GxuexUIYlZq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d8860d8051f4eeda4eb19fa200e44f_JaffaCakes118

Files

49d8860d8051f4eeda4eb19fa200e44f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ