25f9cdc226266c108dae2e7303e29466_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25f9cdc226266c108dae2e7303e29466_JaffaCakes118
Size

339KB
MD5

25f9cdc226266c108dae2e7303e29466
SHA1

71352fb8454c960cb0c3601dd71f207d178a85dd
SHA256

09a722a803a055a5f5b13d79f130f355ee8ab2ed0a888915d88b3d2c13b8b364
SHA512

fcb11a4d6ee4d666531769fcf3e24608c5f609e3f399ce09d7fb5ce0d7d3d5a18c9665bbda6657e99e7198d249047d896ffe29e8a214083fb2c358b34e27aa98
SSDEEP

6144:UkocVOBJTlV78DH5bGyxg/DWwjoukIkAAc9FmrFK7h89MtaIEW:Nmz8rIyK/HkIkpcGrFK7vJEW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25f9cdc226266c108dae2e7303e29466_JaffaCakes118

Files

25f9cdc226266c108dae2e7303e29466_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16a6bd5c29a3e9af0128af5e0c7590c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
GetFileType
GetProcAddress
LoadLibraryA
VirtualProtect
GetFileSize

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 730KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ