24d4ae4575566ff8b4bf0b4875a736e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d4ae4575566ff8b4bf0b4875a736e6_JaffaCakes118
Size

67KB
MD5

24d4ae4575566ff8b4bf0b4875a736e6
SHA1

e1ba79eb1350337da85a549b9977dae8ddb077c3
SHA256

871c91b5084b758c8eaf4cdf1eac3cdb6c3981bdddd0956fb9f54760f648a080
SHA512

9565e9c3b2e459c57b925cec75e4b207c2c6a5c36c07f35f1cd061a798d6100a89ca2caed0fa80914f06d306bb2394c5c536fa5ff19cf99f5fcdc263741a3652
SSDEEP

768:Sy+ZyeEdU2UnKu7bGtHq8cRUNUFWa1TyQgxKm1V7ULuN4Sa3A3Qml80TphUgp4ya:B+dE3eGtH1NYNTspUy+8Jp5aLLDP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d4ae4575566ff8b4bf0b4875a736e6_JaffaCakes118

Files

24d4ae4575566ff8b4bf0b4875a736e6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ