26a4eb9809ec6acc707c24a5ac83a13f_JaffaCakes118 | Triage

Sharing

General

Target

26a4eb9809ec6acc707c24a5ac83a13f_JaffaCakes118
Size

27KB
MD5

26a4eb9809ec6acc707c24a5ac83a13f
SHA1

1998a88cd3e8b54122a8cb55dab0b08398f090fa
SHA256

b21bbbe15d0916558d190aa02a3e608a691783510966c484f16be314d6baf805
SHA512

d0f0562e3f5ee495e0c2092137fc3d37494da444bbb5bd3104fce65f2dcaeaa623ad0c1d024f794d09d5fe63aca2ba46b8ec5734f8708deb949f6efd7e7fe065
SSDEEP

768:u/A/3D2X6wl19BDAiv4FkSYUI+BPbSe9I:S22qe0iv4F9dL9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a4eb9809ec6acc707c24a5ac83a13f_JaffaCakes118

Files

26a4eb9809ec6acc707c24a5ac83a13f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42b1ea921ebee7b1b2c8e45b66d0c2d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDefaultCommConfigA
RegisterConsoleVDM
WriteConsoleOutputA
TlsGetValue
DefineDosDeviceW
HeapCompact
GetWindowsDirectoryA
DeleteVolumeMountPointA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ