26a6c370c12e87d117eb8002a182c851_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a6c370c12e87d117eb8002a182c851_JaffaCakes118
Size

1.7MB
MD5

26a6c370c12e87d117eb8002a182c851
SHA1

5e122866a936f642b6b4a94cca8c262c766c7b64
SHA256

f2ade95fae62ba335ebc75137223c86b90e5268717368f4fc8047ab139ca0209
SHA512

31959c96762fe40a04e67e77714ae092616788f5deedced9b03fb1b16f6478df77eaee62c99049d95d09f4f9eb93902cff6cf898193fcf92435b4566e45c0c0a
SSDEEP

24576:YBVcwkGMaV0KzsJlVHmiX4yB7IwjjgsaM17PVKhbpq96I4gbq:ejaafQn4cIwjjgsJ1pKh09

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a6c370c12e87d117eb8002a182c851_JaffaCakes118

Files

26a6c370c12e87d117eb8002a182c851_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 845KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 819KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ