24a15ab5e94a35128a261996c912937b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24a15ab5e94a35128a261996c912937b_JaffaCakes118
Size

709KB
MD5

24a15ab5e94a35128a261996c912937b
SHA1

b976194374a83d3ddf4a4720599d7a090048a81a
SHA256

5929216d4091c7d4a4a2053c16936a092b8d84fda739ee7e728ba3d6bd5199b0
SHA512

031dbfddaff14b1267b0319283afb7f73fa5ee382a14a0f99bf7173cce853493c52ae42d40ca50170721516f87345ff3ee859bd4abbd5899354242307d3299fc
SSDEEP

12288:jjuKwu5+2pva3TsQj6F9ghsT0ui8Ru6o/3kADm8xjMK7G+jW:2x2pva3TsQn2HipX/XmE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24a15ab5e94a35128a261996c912937b_JaffaCakes118

Files

24a15ab5e94a35128a261996c912937b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 607KB - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ