c26ce94fa080f32b369a55850027cef3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c26ce94fa080f32b369a55850027cef3_JaffaCakes118
Size

102KB
MD5

c26ce94fa080f32b369a55850027cef3
SHA1

cd92a66afa9b144748318b99e3bbb3858f67227c
SHA256

e1839b92d39fd76cad310287e40f2fb66aea406500664cecc88b552099c26fbe
SHA512

cbae00105152d19d9a1b7445bc0757eff0d72afb9aa34a2bb817fdca3970203a4f2703776449ebc3116bb587f954b65155a944c8302927762a8b1b2c24b49fc0
SSDEEP

3072:8h8L9mEALcdPnQuCZif4DonEiEHROt1300jZSHkB4kE:8h8LsEsc/QbQf4MYk7ZSEBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c26ce94fa080f32b369a55850027cef3_JaffaCakes118

Files

c26ce94fa080f32b369a55850027cef3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 129KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 445KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a
Size: 101KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ