25aef9c40486317de1f009b9f14b9065_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25aef9c40486317de1f009b9f14b9065_JaffaCakes118
Size

5.6MB
MD5

25aef9c40486317de1f009b9f14b9065
SHA1

4f39290923f950ce84aeeff44ba6fab4a0c4339a
SHA256

a52ccab0679c7d7ae0bde520184cc1726b01f4d71f3fce4164d6e9d0cea04a2c
SHA512

a9a535d862c29bca5a7f673b22a9009191ffdc6d14d8acfe43fd587236d95475c8dbadd48c34d5d77362ce9d55f52dfb5969b660afd493b7fa4e8d246cd4bc81
SSDEEP

98304:znoLnX9Za8AAPDe3Nf8clgFjn9qZkSmGLdpG1Qrp/iangG:DoLNJAAmNUcoL9bUdps4MG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25aef9c40486317de1f009b9f14b9065_JaffaCakes118

Files

25aef9c40486317de1f009b9f14b9065_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 69B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 116KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ