25ed7295f8eb796b90cfa91cec72bd6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25ed7295f8eb796b90cfa91cec72bd6c_JaffaCakes118
Size

162KB
MD5

25ed7295f8eb796b90cfa91cec72bd6c
SHA1

4d228f86873a4bd663763e6a00aab9194dad5007
SHA256

4cae62f95270060ce656e49c3f78ab0e19572df21ae620833426c3331090a9b7
SHA512

151ddd82cc300f4db905bfeb6b7479b471e1d36cc9b9f5816678ca1bd034c10a5500509c56eb157c9a4d1919ec84f3f7b118b04a86a378d9aaba1f3cb2d59468
SSDEEP

3072:5fM8K1of9N128rENlCabSuYC6QaEq2CcRnrsa35yK5+K:5E8qoff12VNlCaGuxa0RnH3wK5+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25ed7295f8eb796b90cfa91cec72bd6c_JaffaCakes118

Files

25ed7295f8eb796b90cfa91cec72bd6c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ