24eef82050f246cec8211251d6aa2337_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24eef82050f246cec8211251d6aa2337_JaffaCakes118
Size

2.8MB
MD5

24eef82050f246cec8211251d6aa2337
SHA1

9049892950df021ccb7fb8945c6060348435e04a
SHA256

fa6245d37f57f917c72907e697d55c4fa9b2b8ed510f6cf858c85a43071c6e0b
SHA512

1c7f176c98043e0781aa527eaef935dd7eafcfff802de6d8040e1b4e61204c8814b3131cf59bff8931659a475d8f5a08971c5a3a0e4627075dbd7d043aa619cb
SSDEEP

49152:J7ubbFX8AjjChwIFikm0aY3bWTMSDJyzWTtm89I:Ix8AjjY1UfY3bWTMSDJZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24eef82050f246cec8211251d6aa2337_JaffaCakes118

Files

24eef82050f246cec8211251d6aa2337_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ