24ef375967a22613ab088806be153818_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24ef375967a22613ab088806be153818_JaffaCakes118
Size

182KB
MD5

24ef375967a22613ab088806be153818
SHA1

6f051cd72494f190ea3dc419bda91e5a7f52bb1c
SHA256

20d9d9d70f091e2e0ffa7b6a0995546d7b55228b30cb07913dd6160a3ee05042
SHA512

c522fca76a5545cf41122012962c1ccc0b1af967791d2d4ec566407b134925b0aa2a31d65d42d43fc96245631b2fb1e74efc43980fba57f23b9751f25b3bf7a0
SSDEEP

3072:1v96uNresflB8HrWXenNkaUFhNCEgfmTPAjBVBWg63AG4CTtMX+AYOO:1ciXfgLWXY6F8+IBVUg63QCpNB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24ef375967a22613ab088806be153818_JaffaCakes118

Files

24ef375967a22613ab088806be153818_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

scrnsave.pdb

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE