25c6a8af1c3cc5a1ff5efc831402f531_JaffaCakes118 | Triage

Sharing

General

Target

25c6a8af1c3cc5a1ff5efc831402f531_JaffaCakes118
Size

298KB
MD5

25c6a8af1c3cc5a1ff5efc831402f531
SHA1

d98c861624fc3052805d3b930b9056d7d9bd9c6f
SHA256

d7ee02b6e123f914feeee8ce7909e3e782d3730da22649997dd04938483ad928
SHA512

ad2f2b30a7c4fd438bab6182646a6333db16b39de186ed55c24f2e5e60ee97fef47822119cdf9a3bb5067ea9ffbc67461236d4a8aaa03545f4825870d3fe3f8e
SSDEEP

6144:FQ8uksvUGxVkeDa0t8EYknECEMnj05RoWfvh8EybgjmTV2bA22c:O8KVkeDaZER7/joRoDjU/AE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c6a8af1c3cc5a1ff5efc831402f531_JaffaCakes118

Files

25c6a8af1c3cc5a1ff5efc831402f531_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE