25e16170b8875751226eaf3734dfb529_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25e16170b8875751226eaf3734dfb529_JaffaCakes118
Size

308KB
MD5

25e16170b8875751226eaf3734dfb529
SHA1

f023120913cdb7ac11191ffe302c99c0be568083
SHA256

5b48096b6c71cd330bd0cd6f2986f5b969f64bd4995d8ea36cd7daf09596dd28
SHA512

b903ee9269c836876db2388978624799dc7afda1fa23f336fbf09047e1d2c2a717a495b93dc73e83cb3e8fc91723f4c8071ebbd0ce7b11ebfe52918fa6f0f743
SSDEEP

6144:jObwWnS0k58rGR9vp9FhFBmaiihXRdaUgRNfCd5LYgL2rsHGQF1TrpX:ybwWVjrGRzhzniUXRozRNfq5086YHpX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25e16170b8875751226eaf3734dfb529_JaffaCakes118

Files

25e16170b8875751226eaf3734dfb529_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f0086a28f39a4ba39e64cc344d7a9c9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW

user32

GetDlgItem

Sections

.text
Size: 293KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ