b24cba6cb02766d00e7e006543beabcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b24cba6cb02766d00e7e006543beabcb_JaffaCakes118
Size

716KB
MD5

b24cba6cb02766d00e7e006543beabcb
SHA1

732292c4e713aa9dbd726a8ab13a914b75e47f31
SHA256

ca3ca86fd317837e4d470fdf7f85f1aa2b882bbf7d35bbfa4928d7cd8266a913
SHA512

6e9aafe5660f9f0de39f664631faf03953b5ba1279a00ab4572c05f3c07ae60b212beab5503bfb4f7744d2b9f17cd02027492e0ea76d1b6ea041111d620ce9d4
SSDEEP

12288:UiGRjdJJKoKxZHJZslSI3EdWMRNADis04zdFVZ8LUIevEX40:Un5Y7Ry2WMbV8gX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b24cba6cb02766d00e7e006543beabcb_JaffaCakes118

Files

b24cba6cb02766d00e7e006543beabcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 80KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Netease
Size: 564KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE