25df0c753ad4221bc63e02dfc0f8b545_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25df0c753ad4221bc63e02dfc0f8b545_JaffaCakes118
Size

2.0MB
MD5

25df0c753ad4221bc63e02dfc0f8b545
SHA1

cb68826230e100562da9f960de48da612591c16b
SHA256

aef076c1b4385e8b14e0b516cf1359ded7f4ecb88701f1016f91afc893f84530
SHA512

457e8ef28ae119eaee91d58a2dfc13658b4ea4e96b6e3d23d8e2d532b689be5e63e56569e41f2400bb8c680e3b2a61032f64b3f19710c74ba0987690ca9abc1b
SSDEEP

49152:j2FyVvbX0jeShLR0LHedG6rEB3ELeKVx/mEO43IG:KFypT3ShLR0LH2G7B3QD2EOmF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25df0c753ad4221bc63e02dfc0f8b545_JaffaCakes118

Files

25df0c753ad4221bc63e02dfc0f8b545_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ