26d53197b95e9dfe083b165cdf285747_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d53197b95e9dfe083b165cdf285747_JaffaCakes118
Size

1004KB
MD5

26d53197b95e9dfe083b165cdf285747
SHA1

aa421132ac825acbe63e41c9154f60adfb4fd366
SHA256

1b19a81127dc43324aa1a5317d688cd86eef83304f062dabe1b6eed2bc379a45
SHA512

9d16c199a3a3131795bb5531d81709cbd6fe36f024e6b930571d2a165f88b54414c8f380bf08e0fab7bfcd601411fd8cb6eb86318ecbe2e875acc5fcf73353f7
SSDEEP

12288:9ZKiltS3LFbkjEXQM38+zNnUWZxTe95BkEqjTXKC+yNxaOqncgciUDhRmDaMo0ze:bXlkZZ87C695BIfNxaOq43mGMuw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d53197b95e9dfe083b165cdf285747_JaffaCakes118

Files

26d53197b95e9dfe083b165cdf285747_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ