26a3f9eaff30e3dbbf9ef7c9428a9e5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a3f9eaff30e3dbbf9ef7c9428a9e5e_JaffaCakes118
Size

59KB
MD5

26a3f9eaff30e3dbbf9ef7c9428a9e5e
SHA1

eb5939404e32b14f18075d8ea1f37a5273a3f3a5
SHA256

f09c17cbb207c3b8a35773e264688978a367c7974a0e49c1a198b2d5a91624aa
SHA512

06beada936d80896aac7aa326474971c1b0cb9347f92d7a60cc7c29e1c833a760d46340b85a1f63a9a8224eb97e259de76c205aa7295d72eef28b6229c196f36
SSDEEP

1536:Uh1JwydND4hqQxUrD4+OXXOPy9azmYOHi7/:UrJNchqQxThLHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a3f9eaff30e3dbbf9ef7c9428a9e5e_JaffaCakes118

Files

26a3f9eaff30e3dbbf9ef7c9428a9e5e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

289cba44585f9f9809ac0498e98a60cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharUpperW
GetProcessWindowStation
IsCharAlphaNumericA
SetWindowTextA
ValidateRect
EnumDesktopsA
SetClassLongA
GetActiveWindow
SetWindowRgn

ole32

CoRevokeClassObject
IIDFromString

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

SizeofResource
SetFileAttributesA
HeapFree
HeapDestroy
LoadResource
HeapCreate
HeapAlloc
GetThreadContext
GlobalFlags
GetStartupInfoA
FindResourceExW
LocalAlloc
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
LocalFree

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ