026a41f55f3d387f74c5d4736ed49b82_JaffaCakes118 | Triage

Sharing

General

Target

026a41f55f3d387f74c5d4736ed49b82_JaffaCakes118
Size

63KB
MD5

026a41f55f3d387f74c5d4736ed49b82
SHA1

a1b8870aa223eb1a4e37ae5e1fd48d5c65f61d5a
SHA256

6750128e0a915b1d074cbc69ca88633e0744aa88cb0de97448d3c954ea078629
SHA512

63a986043341c08f7924ab4977fd35f74cc0eb74f30a60ab0575084f2f89f33bedddcf6a8de87f4fbdecf654d3e51c68551f555db3c5616257cbae5158a55376
SSDEEP

1536:lru8i4DhoRZObvk4cKPdEvfswxA6pm8pudtGm4dVYCT8eBHA:lfr18ZObc4lgfswx/8dEb7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026a41f55f3d387f74c5d4736ed49b82_JaffaCakes118

Files

026a41f55f3d387f74c5d4736ed49b82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

615609c86403ec5983da4cba82b7783c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrivCopyFileExW
CreateTimerQueueTimer
CompareFileTime
ReadConsoleOutputAttribute
GetConsoleAliasesLengthW
OpenMutexW
CreateWaitableTimerW
LocalFlags
CreateIoCompletionPort
FlushConsoleInputBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE