025bbec7d8ea1fb98023eb8a5ed00af1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

025bbec7d8ea1fb98023eb8a5ed00af1_JaffaCakes118
Size

490KB
MD5

025bbec7d8ea1fb98023eb8a5ed00af1
SHA1

e8b05dc6fbdb758b0cc5a6d17f71c65a8211d6f5
SHA256

fe2008958ca127470586b56e2679d2581f220d6b5c2e6be6d7b4adc39bff7606
SHA512

dd5a4f80890e729a84ebfbd8381d6c5cf9a39c0c59c00f892358bc2c4225027dff440ba95e489422cfb97db5b92740b300beaf4a6ce57a211b01f287cbdabe1d
SSDEEP

12288:e2vCCSHO8BxzDzUtV0tl6YgLLTKDv9/5bFYFdeGXAIux:eFCSu8B939tQrul/5ZYJAIux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
025bbec7d8ea1fb98023eb8a5ed00af1_JaffaCakes118

Files

025bbec7d8ea1fb98023eb8a5ed00af1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 50KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: 338KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 45KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

x.1
Size: 144B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ