26425a197a83dfc12ae41bdc1e48d9da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26425a197a83dfc12ae41bdc1e48d9da_JaffaCakes118
Size

414KB
MD5

26425a197a83dfc12ae41bdc1e48d9da
SHA1

4567add929a4f08f6c865b959a21eeba91ceac49
SHA256

d8c12ec7b1dab456e6fb124b026a695af883e81f1a1eeff749e5b9a1603e38ac
SHA512

617a8244f1cf7cc2173231748f88e38caf424b7e436efa68de5cd93f1b11c0aefc199cc9698f2e3f8717d1271951613bdd03ebe76a00f960286c3dd52ba0c6d5
SSDEEP

6144:Na+UryGW8Y9E6fqAJsYvSCfnu4F1Z0z8MCwDzyjn31/l98qm4Sl:RUmGW8Y9dfd5v1PJ1ZOzyrl/i44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26425a197a83dfc12ae41bdc1e48d9da_JaffaCakes118

Files

26425a197a83dfc12ae41bdc1e48d9da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16B - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE