24a805ed697446d6356638b00357b6f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24a805ed697446d6356638b00357b6f1_JaffaCakes118
Size

653KB
MD5

24a805ed697446d6356638b00357b6f1
SHA1

6a44df8685a039ef4a36112b2801b5a539d3ef30
SHA256

facd96d3406dd0931458c66f441fdfb2eb782c120d7057665c25f4aed9a79e10
SHA512

d41ec764049b938a0766dc2addd0176033702761f9dbd797a5f036b4d0efae4cfaa3e5d6b6fd6828f5ac1217ff633bd211a8dd2688de898661ccd093f01ae032
SSDEEP

12288:qEELmADyWnKmUbKvCa+Ej30S7m4Vsx0jSuzeTw+9edx0lobZD7N:3raamdstQsxozeT9eoUVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24a805ed697446d6356638b00357b6f1_JaffaCakes118

Files

24a805ed697446d6356638b00357b6f1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.31e6id
Size: 1KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a92zz2
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.y77mw9
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.engine
Size: - Virtual size: 3.0MB

.null
Size: - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tss
Size: 650KB - Virtual size: 652KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE