225fb28d7e52e7b53a43e06f504466a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

225fb28d7e52e7b53a43e06f504466a8_JaffaCakes118
Size

516KB
MD5

225fb28d7e52e7b53a43e06f504466a8
SHA1

d9f29cc994abd4a4b33b727a3e61ed62de99edfc
SHA256

ec79cb01292f823f2a301a56d075646a947e9df8568e968a4634ffc01a1e2242
SHA512

a14674c11ad1b11c0f9411981aca0216edd843d678d49056d3d8f9a360a18990922a9a6011bdd1697610f75840c8184485a8e15a833f6d4224f7cac458fa4f32
SSDEEP

12288:joHMJmesUB0IFTeC05Xt69he29FyrgMi:jCLeD0IcCYj29U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225fb28d7e52e7b53a43e06f504466a8_JaffaCakes118

Files

225fb28d7e52e7b53a43e06f504466a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 434KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ