26cf2f6d48a5763e59db203be08e97b4_JaffaCakes118 | Triage

Sharing

General

Target

26cf2f6d48a5763e59db203be08e97b4_JaffaCakes118
Size

20KB
MD5

26cf2f6d48a5763e59db203be08e97b4
SHA1

5b3c4ae46d15ce01ba12ced0e7bbadeef603cf93
SHA256

d856b50a52e202b74556c6e03a00688f11373f11e3a88320b68e432248e6b178
SHA512

90f4c6c9a7854cc8e65ddac267cc9594066da59c87dd09de3b6d71573b82c4b753bb2a90feb3e08823e68a501d9652083114fdc4919d0fd995560407772b5803
SSDEEP

384:ulYzK4kmlsWemGc3PyyqCjeHks7MWYnlzhDb23/vOT4:uyepzWyH7Hksul+Oc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26cf2f6d48a5763e59db203be08e97b4_JaffaCakes118

Files

26cf2f6d48a5763e59db203be08e97b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

811cd460ef7e888f630d7bb18e542f33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
VirtualFree
lstrlenA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ