24dc27b5167aa4908f7e1dc0f2c83418_JaffaCakes118 | Triage

Sharing

General

Target

24dc27b5167aa4908f7e1dc0f2c83418_JaffaCakes118
Size

654KB
MD5

24dc27b5167aa4908f7e1dc0f2c83418
SHA1

6d3b2a0c3122d5173ff9c1ce8dc2b35a76ad6ab6
SHA256

70daed105caaddab78641cda6fe6c145d197a41ee889831f72d5b1cb97437e3e
SHA512

7df450074fc4fad6aff7ab74092a2dabf5ec42bb7b324e4177d4d0c4f9619ef49b55f317a249484a20a49709a7906f407800ef16e5cfa776bb903638b3be0c9d
SSDEEP

12288:VfI43JmVmxR2UmrVPKw22QeR0q4Ndbo/iFPQqlpc2X5GhbLKbnC:l3JiZBKw2S4jR5OLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24dc27b5167aa4908f7e1dc0f2c83418_JaffaCakes118

Files

24dc27b5167aa4908f7e1dc0f2c83418_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7580c649a2b4a06781209a809ba368c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateProcessW
EnumSystemLocalesW
GlobalFindAtomW
DeleteFileW
EndUpdateResourceW
VirtualProtect
ExitProcess
GetDriveTypeW
GetAtomNameW
GetDateFormatW
GetModuleHandleW

Sections

CODE
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ