26c5611ba0c3af22559913798437edc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c5611ba0c3af22559913798437edc9_JaffaCakes118
Size

369KB
MD5

26c5611ba0c3af22559913798437edc9
SHA1

cde108e70671986fd141e4227a7367fd2f3ea5a8
SHA256

95dce958a417a57da1de2486ad20c5b3595088aebe7f80f6795f3cf0966f4f06
SHA512

a8039c31a61bb23e85fe3e914a933b84a3ac8aa7b6480a1f3faea0cc7e1b1b04530107c26db1284943965b5a592b49603e1bd93bdc5d66b95e608a86a135038c
SSDEEP

6144:M4P22Z22j20222I2220222h222220222M222222202222A22222222202222S22g:M4mNtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c5611ba0c3af22559913798437edc9_JaffaCakes118

Files

26c5611ba0c3af22559913798437edc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3bd438dc05d89f886047fe7adfa8954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
GetModuleHandleA
SetLastError
VirtualProtect
LoadLibraryA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 340KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ