25b16a665f9796ba086d074947903ed9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25b16a665f9796ba086d074947903ed9_JaffaCakes118
Size

962KB
MD5

25b16a665f9796ba086d074947903ed9
SHA1

bb69d1c78a7e68307debb4ca24601ce4c631da0d
SHA256

5577384d99b1d2f0102cd4b848b6249bf638988c02b1e9148ac75c8c4c2f9a74
SHA512

32b25559c83fa29b72e0e259838c9bd5bcfde77bebb43fbc6cb1a546c4838805580da67732f434bed694b32738c95dd8fd0e7908bcfab9d732b31d1609e42bad
SSDEEP

24576:KSQwzJiaVvSsy+EgUyFo8j/xVMjYw6IZ9UEn+:mwliSSliFoq5m16IZ9US+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b16a665f9796ba086d074947903ed9_JaffaCakes118

Files

25b16a665f9796ba086d074947903ed9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 924KB - Virtual size: 924KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ