a24e4d883bc79701d57a6a3f9c8bc50a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a24e4d883bc79701d57a6a3f9c8bc50a_JaffaCakes118
Size

1.7MB
MD5

a24e4d883bc79701d57a6a3f9c8bc50a
SHA1

bd221e5dede1e7d4f9355e9e6c50f5099dcbdaa6
SHA256

e3b06f0c0dc023e671e26d1301c190b663c8e6e6924489d69bf881ace4ed8afb
SHA512

2e406a6cf5cd4b5ff0959483a2c9e8b52cb267923cc526f815a1728d1bdfdb2c492e0d6f078a978fcea0266fa492d171f55d6c49eb7715b664906ae13468a202
SSDEEP

49152:62G5BnThB8nEVxd4iNAN2VppTab+rKbeVVx:898naxdFAQVpq6V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a24e4d883bc79701d57a6a3f9c8bc50a_JaffaCakes118

Files

a24e4d883bc79701d57a6a3f9c8bc50a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

service
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE