425f44c01d6f5fe4d387cd510fd243af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

425f44c01d6f5fe4d387cd510fd243af_JaffaCakes118
Size

307KB
MD5

425f44c01d6f5fe4d387cd510fd243af
SHA1

7811a54985f5a32f02761f97a870042e1f0f13a4
SHA256

d06a89c7094a588463fdb0858f5539475365d91648e4b4d26ce0e30c3a3316f8
SHA512

25d47408b47afc692215ba31f768ce8e0975839c30e00c02a9e7d3dcd7df1040ad452e82d806cd5205739e3cc5c98a1e26f0caea03c670eb996585e0f701e955
SSDEEP

6144:HkSzOT72Y0S9zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOZPECYeixlYGicD:Hkqa7SS0YsY1UMqMZJYSN7wbstOZ8fvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
425f44c01d6f5fe4d387cd510fd243af_JaffaCakes118

Files

425f44c01d6f5fe4d387cd510fd243af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE