25545bea1f10ae3679a0ad6240dd4c69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25545bea1f10ae3679a0ad6240dd4c69_JaffaCakes118
Size

848KB
MD5

25545bea1f10ae3679a0ad6240dd4c69
SHA1

6bdf59cea7819c09c973b6297e5e41a70b8c3a33
SHA256

bdaa95dcfc872c3416277879aa65b235bf8c7303d78ab63d379c67667e95daf8
SHA512

acf56a2cc8c9480656abcc3138b85f8f14caec8b9978767d874a01bfd7bd151a696a41a17f97515290c85f170dca53ed0e2ef694f8e5aaf556f2573ed5d60ce0
SSDEEP

12288:s10Pfs9b88Q4VTeGhvbiffYLlqrgYGYMSRC62LKIdqKo1E:sg68ivWYukosR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25545bea1f10ae3679a0ad6240dd4c69_JaffaCakes118

Files

25545bea1f10ae3679a0ad6240dd4c69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ