26d6ae5459a2c8f7050b2fbfda895e31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d6ae5459a2c8f7050b2fbfda895e31_JaffaCakes118
Size

159KB
MD5

26d6ae5459a2c8f7050b2fbfda895e31
SHA1

6de59f65ff5d74fe73660fa10aa956ddb9b1a990
SHA256

6f26485740bfc7727d631b1db61d088cdb6e9a6adc70088eab75be18ad148f27
SHA512

232feaae971dce2a50d5a5ea26f14b773322c45978834a8a4e47627a9f7fb4d9d77bb50bb4c1d53756bc2fce8a521c645ac97d2f57de3e0d6b5ceb93796fdbab
SSDEEP

3072:MMsP6tGP6J8y97HeT9Px3e2Odi09Ae2DegxLYYW5n2ThWsNexPnCrnd:M1SgyJ8Y709PxYJBaxYYcnkP+6bd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d6ae5459a2c8f7050b2fbfda895e31_JaffaCakes118

Files

26d6ae5459a2c8f7050b2fbfda895e31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2beb791b1f1cc7b05a7ab4dc020ef882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
SetCurrentDirectoryW
WriteConsoleOutputA
OpenWaitableTimerA

user32

DefFrameProcA
GetWindowTextLengthA

gdi32

GetCharWidth32A
CopyMetaFileW
GetObjectA
LineDDA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ