a24a6eb70c5dce61e14793b7266b7a6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a24a6eb70c5dce61e14793b7266b7a6e_JaffaCakes118
Size

1.2MB
MD5

a24a6eb70c5dce61e14793b7266b7a6e
SHA1

cdc8ea20670ea7da8c8a5d9313066653a0efaf29
SHA256

fee20de78e93498f95eefa37dc155fc534bb6620cda119092f308eb51dbf2a03
SHA512

ece123dcc52b13da8ce005ecb604846ff3931939df0e365daa6af4f0c527daff0fc1ab67fcf750effc1242e4d41a72900a96d30d3df37f75b62a4569fbb2c5b6
SSDEEP

12288:kkwUufjcRFzx4DQFu/U3buRKlemZ9DnGAeb4ky1:DwrjcnwVy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a24a6eb70c5dce61e14793b7266b7a6e_JaffaCakes118

Files

a24a6eb70c5dce61e14793b7266b7a6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ