24079d4e2537e2269a986612aef27b29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24079d4e2537e2269a986612aef27b29_JaffaCakes118
Size

147KB
MD5

24079d4e2537e2269a986612aef27b29
SHA1

45b421897e4590e9713da1c1ff2de8288a4feac0
SHA256

01f73021e049a837b8eca17c56edf0f2f0265b7a1fbcc0f7a3c47705bfbf861a
SHA512

76a91d4409db188a8f8ad9d77e544cea4111016b5ead33e39a3b3b2bb19f0d7bd4f9e14ad5878fd759ae59a2edc65158271afe0f937a4606e23d560a90186198
SSDEEP

3072:bzxiBaeYklGbmxclyJL4oM+5hI5Hpl1mVgQ1JingqE:h6fD/EopIA0i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24079d4e2537e2269a986612aef27b29_JaffaCakes118

Files

24079d4e2537e2269a986612aef27b29_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE