e24762ff4bf744b1e4c40b01442d4330_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e24762ff4bf744b1e4c40b01442d4330_JaffaCakes118
Size

1.4MB
MD5

e24762ff4bf744b1e4c40b01442d4330
SHA1

a8b6938261482ce45e4ae8e060661bf53081ffa3
SHA256

3cbd563a7574c6e9e31ac7d069c8e883f81c3b2bffba17e0aee4e21f143f5ad2
SHA512

780c65ba097dbbc2b7fe97344fa3911fdc4c6676cfb360a3b259237b2bbaec30793250c692c69e03729f14fbc91c9b9968379bec2d539b895fb5d3b7ecc61de0
SSDEEP

24576:dAFITrkGIz36Q2sbIfi71i2HNtvjexqmTEC5Nn6b6cQie:dCwrkVLbL1frdCYR7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e24762ff4bf744b1e4c40b01442d4330_JaffaCakes118

Files

e24762ff4bf744b1e4c40b01442d4330_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ