49f7fb1acaaa79f42223ac90e733ed6d_JaffaCakes118 | Triage

Sharing

General

Target

49f7fb1acaaa79f42223ac90e733ed6d_JaffaCakes118
Size

517KB
MD5

49f7fb1acaaa79f42223ac90e733ed6d
SHA1

60cdab31c8715d74c93712cfa2548a95a1792f46
SHA256

9e6efcaeb5cca5f7bf7113d21b1ca3e115cd93e9f794ccdfecb98cd3a0e6aca8
SHA512

70365ef40f7630593a9cedbad4529d6c3b36be9b96c04fa8771e51cc4c3b571de74a33c2ae95d3ce4d63b139772aee76d84f9f856c63be6982e0d7ebd29fa243
SSDEEP

12288:MtLsd81Qr2cCCiZ2i5Y1hmVzuK152xBMt:kQ6iXbOzb15oW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f7fb1acaaa79f42223ac90e733ed6d_JaffaCakes118

Files

49f7fb1acaaa79f42223ac90e733ed6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ