25d0ad96a627035113731c770e3e4f46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25d0ad96a627035113731c770e3e4f46_JaffaCakes118
Size

14KB
MD5

25d0ad96a627035113731c770e3e4f46
SHA1

890a5ec49ee937f7f493d5c3b3b0b0456dc48099
SHA256

dd5cd3648d7d43cd24ed6fe2e878f182b268f3ce4a11dfa6772982e77128f668
SHA512

a0cb11b0ed52d95a9601411f010ae0640fcadabf426db4928ebb29012e9dcbceb815f501d244e127cff81902655c56c59dac03f42f371386f5f3992c6914e321
SSDEEP

192:WJR1zWn0hHvIMI3LkXKiPNTd2fPdLWtIs46z8242/g3Ih4SgpW7rU1wfXTR+jZ:WJvzWnsQMyYPSNLWtFTz832/gs4UYjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d0ad96a627035113731c770e3e4f46_JaffaCakes118

Files

25d0ad96a627035113731c770e3e4f46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5846bfb78bef7b1b916d45f8049ae7e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
GetModuleFileNameA
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 113B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ