26c1dc9e0624a5dcf2e16bf68e42d651_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c1dc9e0624a5dcf2e16bf68e42d651_JaffaCakes118
Size

80KB
MD5

26c1dc9e0624a5dcf2e16bf68e42d651
SHA1

c455ad8883472f1084628ab5b8e2640c63b256e7
SHA256

728dc98a1b2d2082483cb296abc38177ce21f8b6393851af2aca08cac4ab7e19
SHA512

1c0ab0460a137dd2e8a9740b47f81f3c479eaf40ccc0b5268364bd3148d58ae54a62f86d893779b636cd0f1644790b5919bc35040b7cf74bfab8e0e45c884ac9
SSDEEP

1536:AVE9rINw7IGdgdcPSs0KNXkLOdtbxIi/I8o740A1gKLcSIyIKI:b9jEGdgWPSs0eEi/OPyIR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c1dc9e0624a5dcf2e16bf68e42d651_JaffaCakes118

Files

26c1dc9e0624a5dcf2e16bf68e42d651_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ