24b73e57504f581617685995c70c5934_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24b73e57504f581617685995c70c5934_JaffaCakes118
Size

437KB
MD5

24b73e57504f581617685995c70c5934
SHA1

4e4afbb60cfa20939d9455e71555ee0d6b330b02
SHA256

5a13525d18d7bf9945508c408fb84f0a0021e72f8c5a881d87090de94ff977df
SHA512

751c780a0b41285ec83ac5d0a10fba4aa169324eba65c4533d309c828acd87a9ddcbd32f82a6492c7b52a38b37f4e568422653d231e786d3dc3842cd59c243d5
SSDEEP

12288:Z9Z8m5DuEy2f+73v3m0/HkWRpsslw9rVB:Z9Z8mPrm73n/nNlw9rVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24b73e57504f581617685995c70c5934_JaffaCakes118

Files

24b73e57504f581617685995c70c5934_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 245KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ