49eef33ea43e37f13136379a1a7c35f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49eef33ea43e37f13136379a1a7c35f5_JaffaCakes118
Size

432KB
MD5

49eef33ea43e37f13136379a1a7c35f5
SHA1

110d89c727cfe3e1e29f55cbb710b09186e648a3
SHA256

ec8d86cfdb6fa82c806659e3cc76a1cd0e4616c2e0f7cbb61316f04de8e59b11
SHA512

884e9a764aa9a53ae3bdf712023a67cd49be0dce3d74aa4fcf65a982e74c89cacbd97a1ce3d21adf991fc13d3c460e0926284d607d4ef06eca97f30b5f7cd5f6
SSDEEP

12288:5xIZhKp1IpxWwHJttkWwAiiu5cswI+o1B1wS9zBEBbYiP25lY:nIZhaKxWwHJtihjcsco1BiS9epdMlY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49eef33ea43e37f13136379a1a7c35f5_JaffaCakes118

Files

49eef33ea43e37f13136379a1a7c35f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

ose.pdb

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE