326cc7776db00575468320c50fc53f36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

326cc7776db00575468320c50fc53f36_JaffaCakes118
Size

544KB
MD5

326cc7776db00575468320c50fc53f36
SHA1

349f7e9c9654c217602ba553ff5c1382fafa54c5
SHA256

bc9fb55c0f9838c3614a3e3b7e3946c2213514e9bd25582cdc5fd20e8ea5fa38
SHA512

f4118f75b7cd2172db506a6feed813d8887e5cedea7069d3ad055f791e85a7166a3bb55c18672725543dcb3bbc10b0cc38e3cb45d188a2dce38a22b857afc760
SSDEEP

12288:ZA26FALAi9dPq3qwYpg4hme820/irb8c:6bFHi9dPqhob8L20qrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326cc7776db00575468320c50fc53f36_JaffaCakes118

Files

326cc7776db00575468320c50fc53f36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ