26b22f460837dea45b61f481e0605990_JaffaCakes118 | Triage

Sharing

General

Target

26b22f460837dea45b61f481e0605990_JaffaCakes118
Size

92KB
MD5

26b22f460837dea45b61f481e0605990
SHA1

9fdf29068fea174545f60472fbcaed7ba2396ba1
SHA256

86ef7da57bf6628e468aebc3106d4c2bb277c6d1cdbef6b426d3a82901e467ec
SHA512

b3128fddd560e25527bbacce2378f63417f82c409a0312ceca1bd3e39e43e874899b59563432fb982beaee7b561c69b9d6a0f7c58bc89e31e8a614fcb3b67e75
SSDEEP

1536:dRqq2XLZIBicEFvNhWRa4a0svJt7b4IqwkgG/7zhn4vHn1kuJXj6RexI5AM:dRqqgO0NhR4+vJ14mkn/pnmHOSXmU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b22f460837dea45b61f481e0605990_JaffaCakes118

Files

26b22f460837dea45b61f481e0605990_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad376164f051bba54a05b9ef114e7048

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
QueryPerformanceCounter
LoadLibraryA
CompareStringA
SetSystemTime
FileTimeToLocalFileTime
GetLongPathNameA
SetConsoleOutputCP
RtlMoveMemory
ReadConsoleA
SetConsoleTextAttribute
LoadLibraryA
GetCommandLineA
GetStartupInfoA
ExitProcess
CreateTimerQueue
LocalLock
NlsGetCacheUpdateCount
OutputDebugStringA
SetConsoleDisplayMode
ExitVDM
SetComputerNameExA
UnlockFile
GetCommTimeouts
LocalReAlloc
DeleteAtom
RegisterWaitForSingleObjectEx
QueryInformationJobObject

Sections

WEIJUNLI
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ