26b008a190a821a8f3054262b2290251_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b008a190a821a8f3054262b2290251_JaffaCakes118
Size

112KB
MD5

26b008a190a821a8f3054262b2290251
SHA1

6a6ee1aba72b1a5c98ece3a0606bf21f19ed883a
SHA256

14690a2a806837a61c158d0e31d06eecf574bf36a7bd9b0da991d90d1fa523ed
SHA512

c40de48bd98b60ebf3c1489f8fdce8705b7fdf45caf141fc4566acdabcddddd97dbeb16e5283c81990a5b768953b0476764d26742aa6b5ce91f4428b06dd3b9d
SSDEEP

3072:2K0LFkEXXXMajewUO4sBqmXrv2fGD0hz9myu131bPVN:b2FBkyqm7ue2ZmycbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b008a190a821a8f3054262b2290251_JaffaCakes118

Files

26b008a190a821a8f3054262b2290251_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cc86607a8d972d4d7cdbc7fff80d2e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsA
CloseHandle
CreateToolhelp32Snapshot
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetShortPathNameW
GetStartupInfoA
GetThreadLocale
GetThreadPriority
GetVersionExA
HeapAlloc
HeapCreate
OpenProcess
PurgeComm
Sleep
UnmapViewOfFile
WaitForMultipleObjects

user32

SetWindowLongA
GetDlgItem
IsWindowVisible

comctl32

DrawStatusTextA

msi

MsiCreateRecord
MsiCloseAllHandles
MsiGetProductCodeA
MsiSummaryInfoSetPropertyW

oleaut32

VarBstrCmp
SysReAllocString
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAccessData
OleTranslateColor
OleLoadPicturePath
OleLoadPicture
OleIconToCursor
ClearCustData

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ