25c03b7301216348299627b2681a750f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25c03b7301216348299627b2681a750f_JaffaCakes118
Size

216KB
MD5

25c03b7301216348299627b2681a750f
SHA1

4a4c1850f1017e07720bd2db0b41ebbc9ea83237
SHA256

04a0bfdb5ef74e6d11f51770bb23456c3767ff2b71f2b6a52e42c7adff052ae3
SHA512

d440e506a4d9b25a54a421776b5d6b1d92f988c5dca0d6c67b00de11f5c3e8e2bb0e3078c0037ab2adcca5f70925fa2a33c6c263541994f4fbc73b4d08ad8b8a
SSDEEP

3072:dWvZWRqln5IxssPlCMgTL83Z5ZrA5lD3xuHuBJpmKNk77/DG0C6mGLuQOscDTFWO:dOF5I+igEJSl3xsu5mFjG/KmWFkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c03b7301216348299627b2681a750f_JaffaCakes118

Files

25c03b7301216348299627b2681a750f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

rundll32.pdb

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE