26e85d750942f2706fb2f66683ee1c64_JaffaCakes118 | Triage

Sharing

General

Target

26e85d750942f2706fb2f66683ee1c64_JaffaCakes118
Size

244KB
MD5

26e85d750942f2706fb2f66683ee1c64
SHA1

6d055503c6b23e1657df4010c803a27b8c29a3ee
SHA256

49488071afcc936cf9bf6a0aaaa96d4fd33ac6f46406e97a98156db9533cedb4
SHA512

d040118999c9c4a8621886586a159d9d7f1282378d1c95bcb4b72822bd625e7236d38873b7eb3b2cc8e4f4dc8979296904fb9bfc117f82e2d2fed0de6eb9792e
SSDEEP

6144:1xalW6qrs4JOv9pAEkD2q46IYlat2vPIIwV:1h61QOeEkBlat2vAN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e85d750942f2706fb2f66683ee1c64_JaffaCakes118

Files

26e85d750942f2706fb2f66683ee1c64_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ