25d2e68df3f6d9a287821ed7421b73d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25d2e68df3f6d9a287821ed7421b73d5_JaffaCakes118
Size

100KB
MD5

25d2e68df3f6d9a287821ed7421b73d5
SHA1

a9b92ca6b8d778103bcb0a9d0a731954126f1c05
SHA256

06e1f3d4ee9140112f384c607a59aad01e38b39f95663228cfce030d97a59fdd
SHA512

c97c8d786dcf11508de11e7dfd16441a11a7e0314f5fa87786bdc6bd0e4b86a81b63e453f9a386e8bbf52dd319e44529fae41c1ee10523b2067452a25d4a0602
SSDEEP

1536:LUr7qn2A3Qn8bTn2tUQXY/HrwkxyEs+hyqcUktJoafRBQCbPyKnMm:LUk3J3iEDlqUGoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d2e68df3f6d9a287821ed7421b73d5_JaffaCakes118

Files

25d2e68df3f6d9a287821ed7421b73d5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

wsta
wsto

Sections

CODE
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ