250e6e895cdf14ab3d3cccf73feb8290_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

250e6e895cdf14ab3d3cccf73feb8290_JaffaCakes118
Size

808KB
MD5

250e6e895cdf14ab3d3cccf73feb8290
SHA1

6b69afcc212d21159b037e25cf252d2472dba2b3
SHA256

143e3cc66d9cad60d531e0c28c0cdbc3e46a8bf86479752e829e1adebd9b6629
SHA512

2e9b867c52d058ad53f8f618235021f0d4048fe38192d709c1e075d168268298bcc06acd4ca6a207e971ff17b7087e1579071ad5ad472a8bef94265b0db38be6
SSDEEP

12288:V8eVYgiSFrtUZPOQKT+mlptjCEUmegFDBWSHfcm8dgCQkBzBj3X:V8/gZtUdOQAZtuEU5S/cm8SIBtj3X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
250e6e895cdf14ab3d3cccf73feb8290_JaffaCakes118

Files

250e6e895cdf14ab3d3cccf73feb8290_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MadCrypt
Size: 94B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ