024f4b0a6437c2bb73d22cf01b88a242_JaffaCakes118 | Triage

Sharing

General

Target

024f4b0a6437c2bb73d22cf01b88a242_JaffaCakes118
Size

359KB
MD5

024f4b0a6437c2bb73d22cf01b88a242
SHA1

d98ae592c0f267f124f4f7b438f22b17f29b890e
SHA256

6c48f6956b954fbe9554f405d6c0a1cf6765ac2f1b1d395db93cf7d93e82429d
SHA512

9243326130da4e1e8a08e370b95d7041b1972099e1907d253f52a85a15e15bc585f7cab4e2425b6609446302f8335e003d1ee45392f89fc8b1d13d1b7685680b
SSDEEP

6144:yx19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPN:yx1fFTGjRLca8d1G1q0Dgwsn/as3kW9l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
024f4b0a6437c2bb73d22cf01b88a242_JaffaCakes118

Files

024f4b0a6437c2bb73d22cf01b88a242_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.his
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e
Size: 512B - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE