24468b208f425a8195b331338ca992b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24468b208f425a8195b331338ca992b6_JaffaCakes118
Size

2.2MB
MD5

24468b208f425a8195b331338ca992b6
SHA1

83d47b6ddc15b8ed03b4b85f0040afe1d76b2afe
SHA256

609757e1c72277ed2d51b4395b585c42604a839fbd6800ef0c485aee6f3fb819
SHA512

cd0a0095bfd62632188220b25f34bc587a2db3bd04963c2f2394ac389710cbfd3617aece8cfc55462cb6eecbe8a0de60d85bdb2c670a86a1f27325ee00f8f652
SSDEEP

24576:OCGrAED3w8PIEvvoTrquV4kAjpMJG5Az22l+VmPEi88mc:Or/Eo0nan1+R+VuEJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24468b208f425a8195b331338ca992b6_JaffaCakes118

Files

24468b208f425a8195b331338ca992b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ