25c03567fa7ee690c7deafdc930ea161_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25c03567fa7ee690c7deafdc930ea161_JaffaCakes118
Size

8KB
MD5

25c03567fa7ee690c7deafdc930ea161
SHA1

f44f84f01e68fa4b72bb803a66164b925cc5cb9a
SHA256

1c5ff332252e9e2b3ac0c2e3309dc506740987d54c175b468ac87938772f4c0b
SHA512

4fb89942dab1623fc0890c36f066baea6828adee348060af8381d00e8079d96f3dc1434033bc92b07cf71cc00edef9461a0a7096f353c24c4608ecef7fabf665
SSDEEP

192:CRXiY/FHn0ViJyYHngdzzRPbLCoOdUJQOsrGL3lmNeRp/46+5fW:e2UwPbLCfUtsrFCg6+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c03567fa7ee690c7deafdc930ea161_JaffaCakes118

Files

25c03567fa7ee690c7deafdc930ea161_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ