26d9893a94ada34a7c2d82fa32f6347f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d9893a94ada34a7c2d82fa32f6347f_JaffaCakes118
Size

527KB
MD5

26d9893a94ada34a7c2d82fa32f6347f
SHA1

55663eea2c9ddc62d21554af529135641c3d61fa
SHA256

f663402643a6d4aae232006cca7b51b7fe9d2c661b5de2518f61c2800566d4c1
SHA512

afd30d1afc82ff037182c0896e6a024601be30613f5ce3294ace902ae38d33de09c224298db6d89f1098a54bdb59270b584b0dc0afa8057d5b9ea91626d400d1
SSDEEP

6144:DGB0mNSCpvx6x5rW67EYxw5OG7go4mB8Txa8yTb8+XT/Phwe43fuca+uZEln:D1m0ChU8hOcN4mBrTFjPhwe4Pu7+uZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d9893a94ada34a7c2d82fa32f6347f_JaffaCakes118

Files

26d9893a94ada34a7c2d82fa32f6347f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 456KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ