26641395037a498517adb52e1488aee9_JaffaCakes118 | Triage

Sharing

General

Target

26641395037a498517adb52e1488aee9_JaffaCakes118
Size

25KB
MD5

26641395037a498517adb52e1488aee9
SHA1

a1dabbd82c66182aae710c277c2bc9cdbbb344fc
SHA256

dc413382aef5b2f579806e59208e4ad6e7ba65e74ba4d47893bb8a766f7fe1c6
SHA512

89acc25d7653324b857a8b808ba3fafd0d5ae421173b41aa7f049d59d070820db96ec1cb2eb111e479c78e4ebbe84a79d7b725c9398f0ac0b7839d92fef2e8f1
SSDEEP

768:TsSuEBr5TxZ3ILakH+MQTbTf1YK5dEde6w4tKmc3K1RHpuiN:2ErPZ3IBZcbTfu1HlrJFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26641395037a498517adb52e1488aee9_JaffaCakes118

Files

26641395037a498517adb52e1488aee9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 516KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ