126ddbd8e8ca6879399e899342b7262b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

126ddbd8e8ca6879399e899342b7262b_JaffaCakes118
Size

844KB
MD5

126ddbd8e8ca6879399e899342b7262b
SHA1

fda57db8928278d5edee6a179ffd45009dba42c7
SHA256

e30f38e2a6df4f34c1dd20c3e78eac21fe8af80836a52a5beca19c6b161bd1a9
SHA512

6906288e21530bfa59ac50c4c3c8966d46bebedbd6bc94b75a9d3c7271356769b7a86a79abc50e3b388cefd4c26887304ce22f91fa99f5795f94e1c6104fa6c5
SSDEEP

24576:51bceDG89OSYU5k7zbvYPziLbNw+hrXqPmPtT49W:5eM9fe7zbvYrEbqMaCtT4c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
126ddbd8e8ca6879399e899342b7262b_JaffaCakes118

Files

126ddbd8e8ca6879399e899342b7262b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ