25b7603c64f442d0afd4278ffa58506e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25b7603c64f442d0afd4278ffa58506e_JaffaCakes118
Size

422KB
MD5

25b7603c64f442d0afd4278ffa58506e
SHA1

30a5d5aafb8015076fb49b4b7f318a8ad8c49227
SHA256

89515cdfd819df9e3f1d1f50c7956db7a4d447b6d2e211a63c2e12f2398e61f3
SHA512

d7c6cd37cd7f6b0fc7ac295950c1e73787f64a732d6183b24bcc0c9e5876f3870ca30ced417d38c14e8ffdd744945b31ffafa4ad65d053660114476545e07425
SSDEEP

12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqIs:ysHU7+h5yeilykkln0PzZBqIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b7603c64f442d0afd4278ffa58506e_JaffaCakes118

Files

25b7603c64f442d0afd4278ffa58506e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ