26361bdabff729f7bc164453a584007e_JaffaCakes118 | Triage

Sharing

General

Target

26361bdabff729f7bc164453a584007e_JaffaCakes118
Size

155KB
MD5

26361bdabff729f7bc164453a584007e
SHA1

a90def5a61f800fc4cbf7cd4941f18f50f89d491
SHA256

c81949d96220e9fbbf4f8df32753c8decb5ae6cb629a7fae3d5c39145c94c103
SHA512

ca16a8436a2ac9de580336fa3eb35cd1f93a30d294c48a9802f2b4de05943036159bf1aefc34ad8dce6552131213d20070f783fad8602f426ef9e21fa2e7b171
SSDEEP

3072:ESqjcXNgmLNcr8aDHrlZdYa8NNpJxUUsTUHTXrP7jd+DnQ2FJF0xZKB:ESScXNgm6r8aDHPi1NpJbJXTd0Q2FJFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26361bdabff729f7bc164453a584007e_JaffaCakes118

Files

26361bdabff729f7bc164453a584007e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9f8b26e71de3488101df8239574a798

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetNativeSystemInfo
GetProcAddress
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
SetUnhandledExceptionFilter
VirtualAllocEx
VirtualFreeEx
VirtualProtectEx
WriteProcessMemory

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
strlen
wcslen

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 432B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE