625b3ec957408e203d53b7c48b80cf6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

625b3ec957408e203d53b7c48b80cf6f_JaffaCakes118
Size

121KB
MD5

625b3ec957408e203d53b7c48b80cf6f
SHA1

521241a7c8694ed0cbe2fc2319053c65a110ec83
SHA256

21fa55aab39041bf62dc145da92f384b6b46c9c5b1709a8491fac5d93e8efa1e
SHA512

9c237991d52fed34096047fb74223705b34f4ec8dbf8acdd0f113df8c9104cd75969c1ef7e884df253848d57f2dd1de2c27656e090473659a9126c81e75b326f
SSDEEP

1536:oOK/oBCroFQiXZEuUSuDsCouJ1gJcxWGd+oryMm+HxUgpd3YxW:NK/oxXNUSIsCofOWGd2Mm+HxUgpdp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
625b3ec957408e203d53b7c48b80cf6f_JaffaCakes118

Files

625b3ec957408e203d53b7c48b80cf6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 180B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE