825f09d57c5af25044af514b2750a90a_JaffaCakes118 | Triage

Sharing

General

Target

825f09d57c5af25044af514b2750a90a_JaffaCakes118
Size

319KB
MD5

825f09d57c5af25044af514b2750a90a
SHA1

7878277c5a87be8cd45c8e77775c7ae45df93d6c
SHA256

26389c3b0415469339579f93088b82aa5f1cad59fe65a8f870218462b92852f2
SHA512

992039c997fc9cf26ac60c421641f7704feb787ce2da866804234e9d66912c59f0fdd7b514aee48fc86d59e9448f0ff422bf78e8a939b99d898e6f858298f574
SSDEEP

6144:5ZABbWqsE/Ao+mv8Qv0LVmwq4FU0fNoy6xm3tfAs5ZZqH/R3OJUvIVqIk:nANwRo+mv8QD4+0V1603x5LOR3XdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
825f09d57c5af25044af514b2750a90a_JaffaCakes118

Files

825f09d57c5af25044af514b2750a90a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ