25d84ad50aee6b4f127153d6bca08806_JaffaCakes118 | Triage

Sharing

General

Target

25d84ad50aee6b4f127153d6bca08806_JaffaCakes118
Size

127KB
MD5

25d84ad50aee6b4f127153d6bca08806
SHA1

ee305403bde5d57f44c0fc9d935c6243d7b88efb
SHA256

59f1309243e2c3cd83c03466de8a34d7d1b26508b4945b5ee25f7d26f0ae811d
SHA512

979e196513b3c4c2bbd99eeb6d2c5af5ac94218db843e4ce28c8d173fb52fe6ac048da6e5752f668f48cf0d7d89c497e52590b41172b11cf1d533d79d5cb71dd
SSDEEP

3072:Q1pd2/7I834v/y6vbDJgSuLN/8fhgx6mD:Qfu3K/VD2/K+l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d84ad50aee6b4f127153d6bca08806_JaffaCakes118

Files

25d84ad50aee6b4f127153d6bca08806_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ