26859ba02a689c8498efe958589e7d4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26859ba02a689c8498efe958589e7d4d_JaffaCakes118
Size

97KB
MD5

26859ba02a689c8498efe958589e7d4d
SHA1

5be77e5cf0e6d391c5dd06a7d142ff1f342552bc
SHA256

c858c90fd4f0a5a17ac05a9ce62bd35f312a98eb9587696b84c185fe4580ec35
SHA512

c3386f5f2b47cb21de0d07bd55779270731e48c9fd6997fea0236c756b123f1cd048bb7dc125ceaf4a7e05fbabb9a0bc767a80f85177767a137f13d48ffade78
SSDEEP

3072:WxXegqr9jqZfTPbUNQRom+qOUKk2yV5+k8DQtTePHBA:ygqdFn8Ph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26859ba02a689c8498efe958589e7d4d_JaffaCakes118

Files

26859ba02a689c8498efe958589e7d4d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2f13a1c7afa57cf2f5faf999d25447da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent

user32

SystemParametersInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ