24b0902ff4e3a67f3b6034aa873e33eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24b0902ff4e3a67f3b6034aa873e33eb_JaffaCakes118
Size

106KB
MD5

24b0902ff4e3a67f3b6034aa873e33eb
SHA1

7a2bb1a77872ed681ef2c296ee5d099a3fbd026f
SHA256

c1697ca2190802156e32225ebfee65480dd94cb05f8fe63ad1add685089d9f89
SHA512

7ddbe9b1846e7ece7b7129cc3928cc7f482e866495691e5f70063be55fb977202ed9f32328191ef681fd8deec56a894383afc67e703f7550c8bfaccdef07c8af
SSDEEP

1536:Lv2OXLB+7vmdT8awPvZGd0v2MQ7k7urqCMJo8eqtpRgnY1FZapR5l/Qz28IKRJ:D2O7ACdSPBBv2M0UJo8eqtriRWLIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24b0902ff4e3a67f3b6034aa873e33eb_JaffaCakes118

Files

24b0902ff4e3a67f3b6034aa873e33eb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ