26e5f4ae8fcbab89ab0521b50cdecc22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26e5f4ae8fcbab89ab0521b50cdecc22_JaffaCakes118
Size

260KB
MD5

26e5f4ae8fcbab89ab0521b50cdecc22
SHA1

ddcc876a89c964386c3216aac3443e89fa61360e
SHA256

c8aa559e5e41a92581bba310fe6ca4e18ee4753c5f09fb57d867fe18cb63d6b3
SHA512

494b50a91e025995947f516d33baa4c41ac7f8af48905e464f095c565ee5bce8337684285e16c1397141d8f21e9fa94edd88dbe4ec36f34ac4be2a98b163e380
SSDEEP

3072:3stK/zRW1M7XyMeolAJrg4rXz/d5h39N5GHiJ5Trp7oQy1FrdrorQ7l7WuvYR1fV:3sURZ8oWrg47d8HiuQ4FrdksWuKfC3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e5f4ae8fcbab89ab0521b50cdecc22_JaffaCakes118

Files

26e5f4ae8fcbab89ab0521b50cdecc22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE