26681537e52f3a1c8b301b5f1da0dbe8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26681537e52f3a1c8b301b5f1da0dbe8_JaffaCakes118
Size

164KB
MD5

26681537e52f3a1c8b301b5f1da0dbe8
SHA1

46a940fdf643ecf9e8166fa5c4ca02eb14b67eb1
SHA256

28410efad4e4a10c85323730387de75fa478627eb0d6d1fd080bca130c5c838c
SHA512

fe461ae888fc20cb03e908efaa081389e29a3631ab0c90c5d2fa0b207b9b465cf546296d522ae2f1c43ee947ef48112b47bcb126dcb923326b364d56189f3cbc
SSDEEP

3072:X6i1RrXEnHSWg66aSCQMOgW1tR/4p3yeuUe5qVmv3DH1GO:X7ZXEnHmtCQMOgItR/4pBHAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26681537e52f3a1c8b301b5f1da0dbe8_JaffaCakes118

Files

26681537e52f3a1c8b301b5f1da0dbe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9be7434b82c63fbf9640fa587f3079ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
CreateMutexW
GetVersion
WritePrivateProfileStringW
SetCommMask
SetProcessShutdownParameters
QueryDosDeviceW
GetModuleFileNameA
VirtualUnlock
SetTapePosition
GetPrivateProfileSectionNamesA

user32

DrawStateW
CreateWindowStationA
AdjustWindowRect
GetFocus
ShowWindow
ChildWindowFromPointEx

gdi32

GetEnhMetaFileBits
GetCharABCWidthsA
GetBoundsRect
CreateMetaFileW
GetTextFaceW
CreateDCA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE