25b920097551a54a6914030e9f2e1670_JaffaCakes118 | Triage

Sharing

General

Target

25b920097551a54a6914030e9f2e1670_JaffaCakes118
Size

56KB
MD5

25b920097551a54a6914030e9f2e1670
SHA1

7872b715670b724f54000618fd4c6bcccf01cea8
SHA256

c06b956ef4b82ede6b739e21f88dc0838268ab4d1a7b48c9cdb630a64f337f20
SHA512

c06758d79e8d5aaa557d51c1b418a5712a7f63230950c582848ba4b4785d7a5c170b63c2687dc347d89570dbc2be311ee5e010d4e792c13378f92c5de37d1d47
SSDEEP

768:OlMBzrkySGzCLDgzXHsxDcVW8ZZqZ0GPOFy66PoMkU0si7uvGGu99DfpE6hDuA8m:OuBHlOV8qzPOM666s4VP9d1z81S1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b920097551a54a6914030e9f2e1670_JaffaCakes118

Files

25b920097551a54a6914030e9f2e1670_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26ba1e9527cb7c543f736969d4ddb5dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeactivateActCtx
GetNamedPipeHandleStateA
ReadConsoleOutputAttribute
VirtualAllocEx
LCMapStringA
AddRefActCtx
SetCriticalSectionSpinCount
GetCalendarInfoA
EnumSystemCodePagesW
FormatMessageW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE