26c17748f27a4acc34a083728f4fd1da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c17748f27a4acc34a083728f4fd1da_JaffaCakes118
Size

10KB
MD5

26c17748f27a4acc34a083728f4fd1da
SHA1

da8110d6b77f97c0991ccb9218c61ecebc4a43ae
SHA256

e0584e3109bd3eb3edc7e3f31307646e3bbeb9f21d43ec2f57b14b827c738b86
SHA512

0d46199af312465e6cc9be85ed0a378659977fd0a2990ee91c5ff72ae5acdcdba9f9d82a4dc1871c5447097ff8dab7311ae30f701a47475bc258d54bd61a70d7
SSDEEP

192:YT4IdcDx+eqLjuT3z7iW/6YEAqxAjC3Qs2xqV44VXQPNaxCrpEfvFNDhvkX+njEj:hGcN+zGT3iswVBVZecxBjlpjn+IeSl3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c17748f27a4acc34a083728f4fd1da_JaffaCakes118

Files

26c17748f27a4acc34a083728f4fd1da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

106e049155f5461d533683d15a222591

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout
GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA
StrStrIA

kernel32

lstrcpyA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetVersion
lstrcatA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

comctl32

GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE