26a9cf71219e128adc8f4d87367d0ca4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a9cf71219e128adc8f4d87367d0ca4_JaffaCakes118
Size

695KB
MD5

26a9cf71219e128adc8f4d87367d0ca4
SHA1

18f5d22def4b95e49bf0d18521341399d5da81e0
SHA256

63a792f30f3dc4f7f7b3047368691fb01b7649cc27d68258146a3c878d460d43
SHA512

0a13fc28a6d7d6adc366e64aba66754e1ad64da756f00d67368bbbedc782b3425276cc7bdb4a5cc71f07a885da11d8e541e5d048f4dd48ce1fc655b0f6d66ee7
SSDEEP

12288:zGA+HYl9/5UyTsmZNZgnIG2y2FoVYlRF3Z4mxxlpneIeG4lWATAeC:zGAYYnqyA/n4oVURQmXl5eIeJYATAeC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a9cf71219e128adc8f4d87367d0ca4_JaffaCakes118

Files

26a9cf71219e128adc8f4d87367d0ca4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 357KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 319KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shield
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE