26a7d5f7c1690ebb08f60b2e40f36903_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a7d5f7c1690ebb08f60b2e40f36903_JaffaCakes118
Size

364KB
MD5

26a7d5f7c1690ebb08f60b2e40f36903
SHA1

0c1abf5b57a82e4dfc60c2cdc76e03e6c21e1d7b
SHA256

cc4d1a9f1f5889ea4d9f0c32a65696eff2c3ccda80496b489af9f4ed3072fa3e
SHA512

620ee77763beef213348ea9fd512c6eaac87ef03293e348423b09e48663a78674e851f64a2f6d5432902dcd2f4ece05a04e3330bac36aaaa0705c8c39cebeb68
SSDEEP

6144:ZhPv6uB5LwXFuVoiOfGF6C9VunE2opxsJ/oYli2zQFcVsyjlYvEb:ZhPvBBtwVuVoiO2ViYpxsJgYQ2UFc9jz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a7d5f7c1690ebb08f60b2e40f36903_JaffaCakes118

Files

26a7d5f7c1690ebb08f60b2e40f36903_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e49a0e7a29388b50a09fdbba3024679

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
ReadFile
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetCommandLineA
HeapFree

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ