326d2832aeff652d341f3eafa97a4b29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

326d2832aeff652d341f3eafa97a4b29_JaffaCakes118
Size

82KB
MD5

326d2832aeff652d341f3eafa97a4b29
SHA1

677a052a14e6e717a4a2adf29e9ddd40651e2183
SHA256

58e7fc5c8fcbcfd3c1c33b06b3f8774528230a93d1bb1c86302dfca4a05f9213
SHA512

d2964be39c9b8c863696ba020395bed234000f3ee11991d3c58a25f8e2620447a6c7b27b8a223fcb2cb677f7c115b4b8435ccfd0e345a94bca9dc4637e7baac2
SSDEEP

1536:PPqQV/AQGO9pflIdkvqiPVPIGv7Na6FRLfpKrxeNabnvzuK3QjP+:kPYpadLiPXHRL0Sa7vzuOQjP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326d2832aeff652d341f3eafa97a4b29_JaffaCakes118

Files

326d2832aeff652d341f3eafa97a4b29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ