026d602be88ac90f3d47b51125b7cb16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

026d602be88ac90f3d47b51125b7cb16_JaffaCakes118
Size

229KB
MD5

026d602be88ac90f3d47b51125b7cb16
SHA1

44facb6773d25302ef1a1ae601d1bfa65003f2c9
SHA256

126e305ae574e6b6b892999f2214886830683d199fc89de2f645f4d6c743ceb3
SHA512

563e5755f76b20a868211967dd2be7a79673a42e7ef2f7f8da5328d11e348c65f0710d3c501aeb27f28cf0a1b63e098691a4e567c364368eabd004832f57c24d
SSDEEP

6144:X731bdBaBCXvmdYPk/Xg3aLgmeZ8Dla+xt4s/iDjxKbdBI:b1btXvdP6gRZA8+xt4XD8b4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026d602be88ac90f3d47b51125b7cb16_JaffaCakes118

Files

026d602be88ac90f3d47b51125b7cb16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ