d26e0cca043236017d57f591167c454d_JaffaCakes118 | Triage

Sharing

General

Target

d26e0cca043236017d57f591167c454d_JaffaCakes118
Size

699KB
MD5

d26e0cca043236017d57f591167c454d
SHA1

2a94278c3d791bf018d2d2350db58bea4e6aeb42
SHA256

8591e19d2f2f68e3190edc9e8cf14564d0c9d2504374962c2d7bfa15618b83f2
SHA512

7d5552b8923f2083960c7f7ad653ec97309fd941b9c2e8a7609f876745104744ff9bb9359565f640f02362ce55b63e242ca2d29008f31bee7bf99704f362a5d1
SSDEEP

12288:odyH+dDQqRZHTdn807yX9ZgBRXjIjL5czCKVtjb:odKqRZHTd8RNZGRUc2KVtX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d26e0cca043236017d57f591167c454d_JaffaCakes118

Files

d26e0cca043236017d57f591167c454d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ