26191999de7488512eccf2f7ebe7e11d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26191999de7488512eccf2f7ebe7e11d_JaffaCakes118
Size

177KB
MD5

26191999de7488512eccf2f7ebe7e11d
SHA1

8fb8cae1c1acf964f96357e932c107510a5be997
SHA256

13a4ea0a40af38325a220945d1bba5864084c0f43c12d38da4027139a7a03812
SHA512

ef744011953699e31f004ecb1a5172fa08f871fbdb289bd80c0f1784b36bd2934c9ae9b1a824e1cdc7bf21cee41f0236b6dcb09c1ef01cade4842b0b3bd03fb1
SSDEEP

3072:gxxm9nvR85IsOCHwYJrkvBqd6czLyettLtgYmxChFmrjfXTUvH:8m9nONQYJkvkd7zLyGQobgjfX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26191999de7488512eccf2f7ebe7e11d_JaffaCakes118

Files

26191999de7488512eccf2f7ebe7e11d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c3f3ba3f420af26f1a5cdb3cc554f2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA

user32

CreatePopupMenu
DestroyMenu
FindWindowA
TrackPopupMenuEx
ClipCursor
RedrawWindow
GetDesktopWindow

winmm

timeGetTime

rpcrt4

I_RpcFreeBuffer
UuidCreate

kernel32

GetModuleHandleA
TlsSetValue
GetVersionExA
TlsGetValue
ExitProcess
GetCommandLineW
TerminateProcess
GetModuleFileNameA
GetCurrentProcess

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ