25d66edb655a36c1af8296eb0338bd57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25d66edb655a36c1af8296eb0338bd57_JaffaCakes118
Size

50KB
MD5

25d66edb655a36c1af8296eb0338bd57
SHA1

0db8278a4b419cfe2c470d60f74a7e784a1c3327
SHA256

0297e90db0d28bf99caac669f613dac5164c33175e3282fa843cfd84a46323c9
SHA512

82746d1ac4210749c4251ea19910e58e83166d70eed0fee98c65670e60b7868abb576607e4a9f29cb56d262bb885e97c7febcf33b72cb87f4e9cc0af843f7bae
SSDEEP

768:zG77kXNEMphWQOdW+iEtDY13R3s1GkyUSYua4DW1Xlglhw6RtMaj68d1ft:zGU97h0WbECNPkyyZ4i1qhwc368R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d66edb655a36c1af8296eb0338bd57_JaffaCakes118

Files

25d66edb655a36c1af8296eb0338bd57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE