25c2bc283905e0af50240fbcccb06975_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25c2bc283905e0af50240fbcccb06975_JaffaCakes118
Size

581KB
MD5

25c2bc283905e0af50240fbcccb06975
SHA1

9c71a567de3cbe859f6c33bb14edf289ca35634b
SHA256

d79d6ffe8b13d515beffd7962c65ef92965d1838d8b6c4ac253e877f468c570b
SHA512

959c159579b8392d7426ae4566b3549c8cdf0cd01eb13de8a8ef1f9f9be1ff5cca04241ad9d89e39cf9ce6112a013b01f402607af94d8570120160542f08bf05
SSDEEP

12288:ZvcQ5UoY9tuhxw2XW9uUWfuIzQY2Cbj70ayBAKK9VHV0rn3bJJvHd:ZhG9tuh+fbWfFVjKBAzejFJvHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c2bc283905e0af50240fbcccb06975_JaffaCakes118

Files

25c2bc283905e0af50240fbcccb06975_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.itext
Size: 897B - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.engine
Size: - Virtual size: 3.0MB

.entry
Size: - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 532KB - Virtual size: 536KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE