25d4eff798dbd370585c5a10ddcf66fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25d4eff798dbd370585c5a10ddcf66fb_JaffaCakes118
Size

393KB
MD5

25d4eff798dbd370585c5a10ddcf66fb
SHA1

1d4bf08d63a55bc2207016fe8f3b39f618da3b3e
SHA256

d9edaad5fa130cdaaf975c252fbf5f123483d7de1357ac6fa6415ae508b86108
SHA512

46f7f5198f4cf5d07c9d938d6516f7a5a3abc0b173ff486666791588b6d1413f31719c351cc340fe2c9e514d83b26127412a127a0516e780a25cfb5f3d4604bb
SSDEEP

6144:h78KZHR883qIgABUtma73HhiMNZH/HB8m/86kzvKRy/QBh5W1L4VFqvscw1FgJWp:vJ3dRgTpbfxUFzKRyIz5W14a+1Fg/JVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d4eff798dbd370585c5a10ddcf66fb_JaffaCakes118

Files

25d4eff798dbd370585c5a10ddcf66fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 392KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE