25c52fc09a45a630b1a2b411724390d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25c52fc09a45a630b1a2b411724390d4_JaffaCakes118
Size

56KB
MD5

25c52fc09a45a630b1a2b411724390d4
SHA1

179031a1837db65d2aabe740123df8ab3acf290f
SHA256

100a06055ac8b3c017db40c9bc91f5953f65e6f7f1e5e1a2857344332fb36125
SHA512

f406b8ebf264cc5a39e6df36434d2954a05059a09cb1873b8046a165bc62cda2fa8ed4755362f210007d7d21a01c04aaab8e6dbd4f124813b15ec1bcffc9eac9
SSDEEP

1536:SAkkk2l/DbId4vwpUYVv2sOFRvTiJrsTAptL6Xg:9l/D0dLhv3OFNTiJnCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c52fc09a45a630b1a2b411724390d4_JaffaCakes118

Files

25c52fc09a45a630b1a2b411724390d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a28ac30e72a58f2a69a5c9659f5fb14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateVirtualBuffer
DeleteAtom
GetMailslotInfo
GetLastError
GetConsoleInputWaitHandle
LZOpenFileA
DisconnectNamedPipe
RegisterWowBaseHandlers
SetThreadAffinityMask
FindFirstVolumeW
LeaveCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE