24eddb6bf5c8736338167535908eb168_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24eddb6bf5c8736338167535908eb168_JaffaCakes118
Size

170KB
MD5

24eddb6bf5c8736338167535908eb168
SHA1

117892bf1834213f7a235ae882f1c9f3f313e069
SHA256

639e5469a5413a8e3cf19e67ef1d81e541c938c4693525514a9f8dd2876d24c2
SHA512

96e0e0889781f258e3a1374a0ce456ecd4aa65f4235dd1b004f7ae779ca0658de4649bbd6eafdb32a592ee487a8022ec14321636d48b8b3d4567f788b8b6dc0d
SSDEEP

3072:vCu1j8BPOI5s8Dxnj8BPOI5s8DxoWFVUSCLPnX+da/yBEiNO:vJ14G7a4G7vWFVVNa/yBE4O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24eddb6bf5c8736338167535908eb168_JaffaCakes118

Files

24eddb6bf5c8736338167535908eb168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

807d4dbf88522aca43243ab895fbef96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adad
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ