26d66f9b59ca2b006c997c48899ca2a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d66f9b59ca2b006c997c48899ca2a6_JaffaCakes118
Size

814KB
MD5

26d66f9b59ca2b006c997c48899ca2a6
SHA1

e7b5c528536825cc9b25d7dcc00cf1fcd86fa24a
SHA256

c30c5f97e213f5165534f0694dce6a293ed5be9f3dff85035e74a3e13ff6ccd0
SHA512

d243a16990d210fc509bfc62726cad5e47844bcf4ec91451d7b4c995e251257296dc4180152c01bb6cf08b724b1930bbebe8b36ed4b873f2bee59efb43c5822b
SSDEEP

24576:xQxnniV9trbbGOqJFfOQAciLyj6CKNcS6HVxxCM:unniV9trmJFmQAcujaS67xZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d66f9b59ca2b006c997c48899ca2a6_JaffaCakes118

Files

26d66f9b59ca2b006c997c48899ca2a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

202e761d95a0b5f63a25a86fc2030e2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
LocalFree
ExitProcess
GlobalUnlock
WaitNamedPipeA
FindAtomA
TlsGetValue
HeapCreate
Sleep
GetACP
GetConsoleCP
LoadLibraryExA
FreeEnvironmentStringsA
GetConsoleAliasW
LocalLock
FindClose
CreateFileMappingA
GetLastError
GetModuleHandleA

user32

DefWindowProcW
DrawFrame
IsWindow
FillRect
CallWindowProcA
CheckRadioButton
CopyRect
GetDC
DispatchMessageA
DrawEdge
GetFocus
GetDlgItem
GetIconInfo
MessageBoxA

clbcatq

SetSetupSave
InprocServer32FromString
GetComputerObject
SetSetupOpen
GetCatalogObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ