26888fef22f9164b9104e71c77068b80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26888fef22f9164b9104e71c77068b80_JaffaCakes118
Size

60KB
MD5

26888fef22f9164b9104e71c77068b80
SHA1

671658a128686145b2cbe6646c79b8085c24ea80
SHA256

d4a0cc4a160d782485455abbdbf8d6d9ad0f3ccd4c4be28c4ad96b8cf6570cc2
SHA512

10b8127a8f735181edc040e0a3032d1479bc3a17a9595be171419afb4d4e3682601334a5078f9c4fec1cb745ad06fa67cd4ff9e672d1527865ca417076457432
SSDEEP

768:jmahBOvmF+juODXBZ+GP8gfcU+UflApTsiJBgNsZaO2eEbB9yKILIP:BhoeF+K8cJn0BgumI5oQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26888fef22f9164b9104e71c77068b80_JaffaCakes118

Files

26888fef22f9164b9104e71c77068b80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

349c2512a85331eeb40d6f5d24594f18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExW
GetProcAddress
MultiByteToWideChar
SizeofResource
SetEvent
FreeLibrary
CreateEventW
WideCharToMultiByte
Sleep
LoadResource
FindClose
InterlockedDecrement
VirtualFree
ResetEvent
SetLastError
FileTimeToSystemTime
SetEndOfFile
GetCurrentThread
MoveFileW
CancelWaitableTimer
GetSystemTime
GetCurrentProcess
LoadLibraryA
LoadLibraryW

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE