49ceb6def52843d7e9413d0fc0fdc0b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ceb6def52843d7e9413d0fc0fdc0b6_JaffaCakes118
Size

808KB
MD5

49ceb6def52843d7e9413d0fc0fdc0b6
SHA1

c5888a54794cc4ebf63d087709e9ec0909b010e2
SHA256

bd47271e90182e458767303cb4486ee0ecb936272eb886b8f06d7ed9ffff3524
SHA512

88a4851c8f402f96d35bea439e779310d2e7aba88be8719cce68c85da5f6b9526681d5137edf7e8fb9c83d25d95379ea81087ef140018ea18d036d69adcd80de
SSDEEP

12288:05eCtQO4Nai3jk/P6xKW7d/gGEc+cUbn4apvhFfWGoJTaIJ2F21R7iAqkL:oeIgNaPUKW7hNv4T+yi221RmxkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ceb6def52843d7e9413d0fc0fdc0b6_JaffaCakes118

Files

49ceb6def52843d7e9413d0fc0fdc0b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ