24c2759fe52df7906898db6169bda6cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24c2759fe52df7906898db6169bda6cb_JaffaCakes118
Size

387KB
MD5

24c2759fe52df7906898db6169bda6cb
SHA1

5a86b8e09ff0e95aef297554323935103d7fc4d0
SHA256

b8b6e0bf49988c069728e3289528ea07aeb81dd60d48e4162446265875a51f6a
SHA512

f52984a772ca776062a617101ffe7bd56f1a92882bd4a1df388e2345e0a2dbad9f7f93b7aa11aedefd6df2593b08b832ed331538a1c3d7a3629cf793c63072cb
SSDEEP

12288:AaDdHznzZRj0jazha2fUDa/nu9O3jdoS7:Xznzz1Va2fmY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c2759fe52df7906898db6169bda6cb_JaffaCakes118

Files

24c2759fe52df7906898db6169bda6cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

nspack1
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nspack2
Size: 330KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nspack3
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE