26959c8a641fa551aeabda5c29206472_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26959c8a641fa551aeabda5c29206472_JaffaCakes118
Size

112KB
MD5

26959c8a641fa551aeabda5c29206472
SHA1

7f85bc2f18befd57c7692c0a7f1b484d2e55781d
SHA256

f1d5e7cfc6ee49dcb7dfb7203d4d78c5adddc15114dfdfc5cbd5ed4d56cf2cdb
SHA512

9ff453b2a31061b41174b16e7d4581c9eea8a1d5fa9065d482415760d484d35b42d22d301c335e371e5582fa53ee573205ed2481350e5de00716639cca6582c8
SSDEEP

1536:52wF3HKHaKG+TwjXmsttPFl2RQufbVIs89IKzQueI4NV/PF3g8lzQ70q5d:57KxYXms/7dufpIs8Uu94NFPF3hlqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26959c8a641fa551aeabda5c29206472_JaffaCakes118

Files

26959c8a641fa551aeabda5c29206472_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a55ea40f23d9e5926813f8a0b8f02510

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA
Shell_NotifyIconW
Shell_NotifyIconA

kernel32

ExitProcess
EnumCalendarInfoA
FindFirstFileA
LoadLibraryA
FindResourceA
VirtualAlloc

user32

DestroyMenu
DestroyIcon
DestroyWindow
DestroyCursor

Exports

Exports

sfECoMYnhpoYeT

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 567B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text