749d1ec86308455cb4f82af82fc5d524_JaffaCakes118 | Triage

Sharing

General

Target

749d1ec86308455cb4f82af82fc5d524_JaffaCakes118
Size

790KB
MD5

749d1ec86308455cb4f82af82fc5d524
SHA1

12e9fc82099b828e2645e00cbe299403361ea0f0
SHA256

19c49c61c21693d1bc23ecac959509c4eb0ac86e1379b3da45a475346df65e4c
SHA512

bb87d330eae82d0194f2cffae214859957e8da25c0c45fa0aacbe28cd6ac399eb22cb0d40d16ac9ba443c53d31a8c50f38c019bc693d51e3e34c478ed9f13f3e
SSDEEP

24576:5natn8RPaxNm2FuIpB4pkS3rJQBtUkBgJ:5aJDx+IpB8inXBgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
749d1ec86308455cb4f82af82fc5d524_JaffaCakes118

Files

749d1ec86308455cb4f82af82fc5d524_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ