24e8ba798160b078b12657d424f30ef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24e8ba798160b078b12657d424f30ef9_JaffaCakes118
Size

904KB
MD5

24e8ba798160b078b12657d424f30ef9
SHA1

e421320cd4a93cb3c82d2b4dbdd88cd41daff502
SHA256

147162b607780c0d4b5d51f93fd714f20df42d9d2b29576faa1fbd6e685ac473
SHA512

7a4298cdfaabf5d289413b64a72785ea2a5d65f69ec12e40f366ef1b3c25d2c7b42a67e9521a77d625ae674f06e7460665d0de6191ae6d4c3a8d0ee9b9a717f2
SSDEEP

3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqj:hWtTBdsqEPxjjoFz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24e8ba798160b078b12657d424f30ef9_JaffaCakes118

Files

24e8ba798160b078b12657d424f30ef9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ