49f2691626e2447fdcd58e4d3612f8dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f2691626e2447fdcd58e4d3612f8dc_JaffaCakes118
Size

65KB
MD5

49f2691626e2447fdcd58e4d3612f8dc
SHA1

65fd25fe8abf3b4e59351db19394c20964cdee69
SHA256

25d911c2a70789dc8d65ddf0731a74f23d28bc38733745958dc0cbeda3f020b2
SHA512

a6c8fa0728d33fa52c03bd64159ca526be327a0613a6a532b25d14eac8282c5304ddf35a9f2d49251f9b648d256220262f70e08ae3eca3c07651a6ccf030d17a
SSDEEP

1536:RpqFQqHJOf4xa6BLCw1hRXXDRVOP/pa7zgQxd:WZHAfO1BLCwJXzR8PhaYQxd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f2691626e2447fdcd58e4d3612f8dc_JaffaCakes118

Files

49f2691626e2447fdcd58e4d3612f8dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ