26c0bf591467faa59b24838a0b5af387_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c0bf591467faa59b24838a0b5af387_JaffaCakes118
Size

411KB
MD5

26c0bf591467faa59b24838a0b5af387
SHA1

2324b1e9fa5a1e51d41e1f82d3fbac7e32f87e06
SHA256

44d57fa89dfd43cc3ba6574cea12ac571458e2b9cd5548caf80231523757b94f
SHA512

86483400768329a852c69590f3fa2c515b10a82efda9c41be447df7dd4f3c3f7946d2c38ceb4722559e76211cb5cb746b3fac0ea620fc308622ec513974768c7
SSDEEP

6144:2JLuE27+m4DafcOOJrZUo3j4ONzT34dVCw9+C8LcivfkmjsCbOEMRA:227+T2fctcqkONzT34dVv49J0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c0bf591467faa59b24838a0b5af387_JaffaCakes118

Files

26c0bf591467faa59b24838a0b5af387_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb863511ecb4e025ef3c40c2a305caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvbvm60

ord517

Sections

.text
Size: 406KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xqJv5KN0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ