49b8e0178c1a01d3e03ecb4660b3070b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b8e0178c1a01d3e03ecb4660b3070b_JaffaCakes118
Size

1.1MB
MD5

49b8e0178c1a01d3e03ecb4660b3070b
SHA1

87f02b6763c2b986637e069bd2d0ae9c129f2ae1
SHA256

c936f07e14ea8811e418e5a17cdb21e63bea84e650a1555ae27ff2e292472ed3
SHA512

be9526f3cd42b37c6ac3c2787dcb9ae004482c1f37c620c7620702a33c2bf07ac10ad44adc49e1af101176969caca098b36cd4f570a3dea743c546244c32b1ee
SSDEEP

24576:WIfUXEke2OxAbX2ilocw2OL+bKvq3NiFLdW2ZHEAL:vI+8X2ilocw2Oi2v38A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b8e0178c1a01d3e03ecb4660b3070b_JaffaCakes118

Files

49b8e0178c1a01d3e03ecb4660b3070b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 968KB - Virtual size: 966KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ