c25843fbeac6915ded2ecba74535925a_JaffaCakes118 | Triage

Sharing

General

Target

c25843fbeac6915ded2ecba74535925a_JaffaCakes118
Size

289KB
MD5

c25843fbeac6915ded2ecba74535925a
SHA1

8cd4ab7ab72fec959b2239b169e71273ce8da366
SHA256

59621265a5f64d8ef1fce53cc9dfdd1f626ef558129e859477fc6b8afcee6996
SHA512

12ab7cc0a7a1f18bfbf5558bc8d74ee7a35a9b09767def83b8b638da4064a7b301d45ebb3dc871e88d7e220a9206a01acac13cac6f07f9d53c9b045299e67089
SSDEEP

6144:jAQ1/311dHqCntHqZ8f6RVgB7V4IEvMGcFiB0jddiylT5sdnWoVWnwp/g3UWNprd:jAK31rHvgA6TgFNHjHPN5spHVWww5No4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c25843fbeac6915ded2ecba74535925a_JaffaCakes118

Files

c25843fbeac6915ded2ecba74535925a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat_17
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

sed
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE