24849542b12e3402a33a3547d7869060_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24849542b12e3402a33a3547d7869060_JaffaCakes118
Size

307KB
MD5

24849542b12e3402a33a3547d7869060
SHA1

aea19d5f077352ee661408785e46a4fceb4444dc
SHA256

82171edc6120a23bb75c335ace4d36b55b51c2bbd4f5def71b8c06050dcc5db2
SHA512

1c591103612413344ac1994b0ff6f238abe3dc3f2fe489f9beb86d2d8e10eb0fe02f775fd5a7e5894188e94d9299a80a8d0bd2dd16d3b9340dc69012e5ae6530
SSDEEP

6144:bqzBT72Y0SuzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOgPECYeixlYGicw8:bC97SS5YsY1UMqMZJYSN7wbstOg8fve2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24849542b12e3402a33a3547d7869060_JaffaCakes118

Files

24849542b12e3402a33a3547d7869060_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE