b49b756396a1478b55c23136932879f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b49b756396a1478b55c23136932879f2_JaffaCakes118
Size

1.8MB
MD5

b49b756396a1478b55c23136932879f2
SHA1

54ff0e0dcbdac588f6b00666475adfee457a0e5a
SHA256

6466ca49aa3447268bcacdc3ac9947b3550d8e95e626ac3cc0cc3ad82ced7779
SHA512

ac5773f9b10821ffa08b7f97c71f117a53d76b9ad044970385cf26cafbfe46b7c07335a468037f200642cef54338b23ec49268b3e1ab7ab8b1cc680d604e5f68
SSDEEP

49152:tobiz9vYN6zh8oqV2qaT4el+G8J5zW/99791:touz9vD8+4ekGcdE9x91

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b49b756396a1478b55c23136932879f2_JaffaCakes118

Files

b49b756396a1478b55c23136932879f2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ