26412e6c05a6f003901f3453b9d3de96_JaffaCakes118 | Triage

Sharing

General

Target

26412e6c05a6f003901f3453b9d3de96_JaffaCakes118
Size

307KB
MD5

26412e6c05a6f003901f3453b9d3de96
SHA1

aebd543b41af68ea7a6c5899a6ba97c561ad192e
SHA256

94cb36d06e6e0fbd356508e94a4fddf12df9da91887be63200e16c49d5e601a3
SHA512

1693a73deca95e767c6504a84d829d045fb71313dcd6013f60dc52f18ab49b940e0a080bf43431bc9882114a0b70ef1f784f9d6eff0dbffbcd70e6e73c998aa9
SSDEEP

6144:cVTdUZPftNFg75N/4pNZj1dd0PYsWt+ITpocgdpCtXw2g+I0BQg:HXtNW1NqNZj1My+IT6pdpCtL/I0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26412e6c05a6f003901f3453b9d3de96_JaffaCakes118

Files

26412e6c05a6f003901f3453b9d3de96_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a4f68363ac38fcf8ae88d8cb6e8c0d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc

user32

CheckMenuItem
GetCursorPos
BeginDeferWindowPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 233KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ