24109f154e5b19c98ab3652b043a7b77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24109f154e5b19c98ab3652b043a7b77_JaffaCakes118
Size

200KB
MD5

24109f154e5b19c98ab3652b043a7b77
SHA1

7d2c8f0a3d8e49b3a66e686e72bce093ad16cb5c
SHA256

053450aea3fec3b3435d1e623fb72db491e3ad40ada40e73e833164d5178c756
SHA512

f0a32771ffe27a2fba16e3233c9a54d2ef21984b025525f2ea6533f296d8c588f2635a303f69881c2fc699b4aa34bb67d96ee3ea3a69972b43da973c5b7d5502
SSDEEP

3072:RrbWD1MBcenTwmmVQfZhEJMGMZN26WuG4NSHvf6MDJKdImrFzTm9e8K6VbdCz3Su:5QETdmnMtNA34NSH1KvFOOyszZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24109f154e5b19c98ab3652b043a7b77_JaffaCakes118

Files

24109f154e5b19c98ab3652b043a7b77_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ddeshare.pdb

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE