25d30f01b98072b607b405391c454756_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25d30f01b98072b607b405391c454756_JaffaCakes118
Size

778KB
MD5

25d30f01b98072b607b405391c454756
SHA1

5487f27d45c64a3adf3381d06fd51b8d5a90a81c
SHA256

2d9ab5b0fa993de50d4d27896bcd4baa1ce682139b6d61d7f0687c93ddd9ffb0
SHA512

1a3578af751b4d3bd5cde4835fb78892bd0ed8b70ecbf37538c9942b497f67137bd06ca56a399c040cb7d39c303f0226cebd13384bc7145cefb4d5380a6fbd66
SSDEEP

12288:36lg9NZK95brW5AwGwHDx1fKIonIvVtO2tWvP5cU7MoSQS/JdtAqLpJJiQ:q+969BrW5AjixFQIvjO2taTiIq/JiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d30f01b98072b607b405391c454756_JaffaCakes118

Files

25d30f01b98072b607b405391c454756_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE