549b495371ecd8d778b31a888c667892_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

549b495371ecd8d778b31a888c667892_JaffaCakes118
Size

65KB
MD5

549b495371ecd8d778b31a888c667892
SHA1

3d6067f5d84d2e5618a0521a7d05537d6dbad1fb
SHA256

e2af92c6e3770df42006fb8854b36f9b140dce082e9b56b630bb573dbb0cfbd7
SHA512

5faca0513ff9d83241df091e5c6cfd369761073df363ae3598c1a0e87133fc0f3ec223e839490b7e8e6ed44f00cd027d8a5a95d5d9e216a83d998a1be28b45df
SSDEEP

768:tzAHxoIKE82XsQ9E4y73N9WdgeGW55hQc27SsH1H/DGhJtTqm1EPozgzMm99iuLc:tCxyTNSQ85GdSu6t2kA9ieOx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
549b495371ecd8d778b31a888c667892_JaffaCakes118

Files

549b495371ecd8d778b31a888c667892_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3808.0MB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 365B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IDATA
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TLS
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ