1a26ec99dea4a97d2e813528c395222c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a26ec99dea4a97d2e813528c395222c_JaffaCakes118
Size

14KB
MD5

1a26ec99dea4a97d2e813528c395222c
SHA1

bcbd18fb4cc0ee3cb55986aed7ea7a8533f4f8da
SHA256

42d235e0c35bb85e183983992c4589d26cb9db4a158b67311f3fb032473a6a33
SHA512

ad6d46517deea846426d0c24c000086ba833ac3b801db00d58c613b798cb9942d834c618a627659fb3c2094813b8413fb20697778cac1fb4803492ca0f49393f
SSDEEP

192:o4jIJcHjwMghYPAhFU36TAeBhu2wumIUgbVzHoHWL3yBfUAsNoPNFsR+9sNp0FhC:o4jCcDwzooBhu3pwypUAsNmrG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a26ec99dea4a97d2e813528c395222c_JaffaCakes118

Files

1a26ec99dea4a97d2e813528c395222c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ