1b24aabd67f10da562808157f38a4751_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b24aabd67f10da562808157f38a4751_JaffaCakes118
Size

22KB
MD5

1b24aabd67f10da562808157f38a4751
SHA1

4dc7ce0e267e68563fa39861cfb0dbc04b4d110f
SHA256

9482ca6174014745d33660297155d9b6068d0eb4480d5004817985872690eb5b
SHA512

2da8f9351398b84e9fdc12381a5ac4fcc7e628abf94b6e0cd23e3d233c24ab784d11392f74262012423a44567ddd8c59e215d31f68fb5d4d5664ba1832eafd03
SSDEEP

384:jHVeAsswPjqA4sWTD/DviOuP2lnz+H4TfkpToAPbNWPYR:j1eAslyx7DviOmeyyUT3PbNWPYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b24aabd67f10da562808157f38a4751_JaffaCakes118

Files

1b24aabd67f10da562808157f38a4751_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ