25aff5cde10f2abd3056a33e04497613_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25aff5cde10f2abd3056a33e04497613_JaffaCakes118
Size

2.7MB
MD5

25aff5cde10f2abd3056a33e04497613
SHA1

1a8087d05731b66a85a1e86eea1c9ed60c78aae1
SHA256

54a3c9b98b7814d511c6610ea5d3d91637e3063efc0b17fbec64721395c0e204
SHA512

2d3ed1f0db7058a035191ad943ffc3c10e5499aa2acea91c8f00f22c4239a66541cca43e441a850cd8b6706cbb67dc2408bdc063b23595a19d10e03770948f61
SSDEEP

49152:N7fqhpop6M/fDiakIV56eyH3IBYcIMy8ON0+hqNtyf:N7ShGH3HkIL6z4BvIh8ON0m4tyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25aff5cde10f2abd3056a33e04497613_JaffaCakes118

Files

25aff5cde10f2abd3056a33e04497613_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ