25279e0152952d489b4ce2414ce3f285_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25279e0152952d489b4ce2414ce3f285_JaffaCakes118
Size

268KB
MD5

25279e0152952d489b4ce2414ce3f285
SHA1

eb50ab15133aae708fc0f1457fb7f31994dbca7f
SHA256

6dd09d030550b192081dc9b555dddfa3a0a6fd65ff4d971c49d021d464e13b0b
SHA512

5eb433990b48081e5551d4e5341e78dbf20b953d97556638a03e20c4c2ab41b7811bdeebd3519b696370e6b1b9e9195b50f1a47b562d187d19314f58bbbef025
SSDEEP

6144:Bg/6G09TFNUCrAp80Vdls63+BfCmIgOsl3lLrsgXsjqdeQZGin7:BSIUgApqASOg/RogXrL86

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25279e0152952d489b4ce2414ce3f285_JaffaCakes118

Files

25279e0152952d489b4ce2414ce3f285_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pep
Size: 30B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE