24213b86afa3edc2de64c4db6dddc713_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24213b86afa3edc2de64c4db6dddc713_JaffaCakes118
Size

325KB
MD5

24213b86afa3edc2de64c4db6dddc713
SHA1

aa56cd98562f8634511cc48a2dcd78dae7da051a
SHA256

e0a7971d21018d86f1c7a180319cdd8b0059cdbf14d96cd336876228605af1a1
SHA512

8656eaa92b09026891e994674079eb0f142e535c7fafc12b9288e28537d66d6acdcd0428577312e9203b4a163dfb52b718f9ca387ddc1ed301d4e24695cb4fe6
SSDEEP

6144:XW36RPb3Exe4FkqMkTVCbE351KRnTnm9PEJ2p7+FR0:zboaVbUaJAiDH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24213b86afa3edc2de64c4db6dddc713_JaffaCakes118

Files

24213b86afa3edc2de64c4db6dddc713_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wscript.pdb

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE