26725d3e9f0d95baec93ec00fc78542b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26725d3e9f0d95baec93ec00fc78542b_JaffaCakes118
Size

395KB
MD5

26725d3e9f0d95baec93ec00fc78542b
SHA1

42cca2d47bf36eb5eda74b39ef5e6747f3d3a148
SHA256

b6d627854874db9491c18142e5b73b0dc2e396bc55ae73aa71410569d3e52412
SHA512

646a86180223e73b8a4e38d189260b2e847abdca524c13fbce6f7ef3f4945b37f9fa50bf1d865f0f0b6935ec99dc0408017a7481817f47958cde5849a2152434
SSDEEP

12288:rTmMrtWWzNXYSzumAmUcgSDcBMVjfLADMhBpV:RzC/LKS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26725d3e9f0d95baec93ec00fc78542b_JaffaCakes118

Files

26725d3e9f0d95baec93ec00fc78542b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ