49be90ab871116b3f0d940fefea5084c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49be90ab871116b3f0d940fefea5084c_JaffaCakes118
Size

315KB
MD5

49be90ab871116b3f0d940fefea5084c
SHA1

39057e47f7ab35697554f24a7e7758c0fdf2487b
SHA256

aecb3b611bb4838a8787bad30c266874409e71443c79b78760cf4ce700fbddd5
SHA512

60831f8b325ec1c07c62f2e092bae6729c46dbd041d979f19754d4ca13991f67cf146ea8dc82b6c0611f90ca2e76a475758dd22af49e6107f8e1a554c2d384b0
SSDEEP

6144:Hq3gCcwoqWYHtS/YnI+tnYDcMbY4FmNzNwm+MhUaZ0xO1BcC1cZ:Hq3Xz1NfnI+1Kb5KzNVNZhPcnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49be90ab871116b3f0d940fefea5084c_JaffaCakes118

Files

49be90ab871116b3f0d940fefea5084c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE