25d982cd928d8eb00be1ace170888b2f_JaffaCakes118 | Triage

Sharing

General

Target

25d982cd928d8eb00be1ace170888b2f_JaffaCakes118
Size

448KB
MD5

25d982cd928d8eb00be1ace170888b2f
SHA1

299c4a9ec7ef059a5a56e98cf01bdeed3e7f62fa
SHA256

004b74df456a90c5e49ae41cee8836807de305126f88a2336d7e3d98fd943ffd
SHA512

0e842aa4fe0e1287d4e57aaf3bbfd46857feee7e815f60669f1acf74f415f0615eb44c2bc51d7a3748363148e83b9cd7c4a1f0a147045e453de6908ab6507e67
SSDEEP

12288:owgoL5SS6v9kUWgjPbwORv+WNkB3wW4iW0ymy:4oc9xjPbb+WN/W4Z3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d982cd928d8eb00be1ace170888b2f_JaffaCakes118

Files

25d982cd928d8eb00be1ace170888b2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ