3a26c8362b73411514d7edd26a8ada98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a26c8362b73411514d7edd26a8ada98_JaffaCakes118
Size

431KB
MD5

3a26c8362b73411514d7edd26a8ada98
SHA1

c4dce6c140c6b5dcfc0d9c659d0864fa82b08048
SHA256

719999b177a4ff4fa27be6f121211b5e26592bd066186e18c45cc0521dac2a0a
SHA512

da6f8a16968ab6ff4f410c8f950ebf80e484637fe03b12302138b43678fa73814d546ca09261787644834fcbeb979cca53d0f5cb7e49636119f47ba390e15e74
SSDEEP

6144:9j75dBOcHpi2iC4tg0f1/eafYvcplSlUKFy2cVSZFeXdB5vw1gyApd/A2+8zQF0B:lBOcHs2ihFSqjTVSaAgyAn/A2FtX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a26c8362b73411514d7edd26a8ada98_JaffaCakes118

Files

3a26c8362b73411514d7edd26a8ada98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ