25faa2bf388a34140ddec521f4ed1839_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25faa2bf388a34140ddec521f4ed1839_JaffaCakes118
Size

510KB
MD5

25faa2bf388a34140ddec521f4ed1839
SHA1

e993caaf53136cb6522e930037a9696db83572ba
SHA256

d90381aec641d0e20c0f79d41c4c5b827e38ca8a4339c523cc930655d600a3ed
SHA512

2a6db50854983d4c78ddc283fa391a6119ec2b7f0223a4fb879f927b193d82325e4d5b77f8f82f30ab9f42070da329011b864ce07eae18450a336745e4d1f59b
SSDEEP

12288:bFOdWqGehYbyBxM31C4vFMNVK6Nyl1kMMHz:bFbqL+yKo4vFMf5W1kM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25faa2bf388a34140ddec521f4ed1839_JaffaCakes118

Files

25faa2bf388a34140ddec521f4ed1839_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3c979da68d1e85ac9fef388cccac362a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileW
Beep

Exports

Exports

rttr

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ