26c42b4fcba0c3fada663102ea1c8e91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c42b4fcba0c3fada663102ea1c8e91_JaffaCakes118
Size

494KB
MD5

26c42b4fcba0c3fada663102ea1c8e91
SHA1

62a1223749dee83e8b5373fc0b48911937b74135
SHA256

c772965a34f4db03cf808b4b428cb628b4a5ddca1015373cb3dae83a8bc9f47c
SHA512

8d48e88f1da7cbead9f14f51db988c24d2a69f0f13a5150b0c3be86ef9da55af63df561a8142aeba4faaddd975ac6371a10580c0268a8e1dc9f035151f7817a6
SSDEEP

6144:IzRIeHY4mK/Aui+GwIe60o+sxMXk3ZnxbWbjx1QrO:OueHYuAui+GwIX7mU9dWbwrO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c42b4fcba0c3fada663102ea1c8e91_JaffaCakes118

Files

26c42b4fcba0c3fada663102ea1c8e91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ