26dab6e00ca2c5a320354bd74169522b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26dab6e00ca2c5a320354bd74169522b_JaffaCakes118
Size

528KB
MD5

26dab6e00ca2c5a320354bd74169522b
SHA1

180d2173cb0c68fee6b0cbe7b8b5126256deec30
SHA256

6b03cf3e57feba2971b73c2da1a27b803036bb173a4318073ea51b00a37fd670
SHA512

b2edc1ef676aa91dafe790d87206e9d39e673c7b56899d1c637ae690a14c843ca1f40b6c7fba6ed3583b763a88cf6f87669cce5d556f569fad2be8cd218290e3
SSDEEP

12288:bdWsiHxAmpURFc7YrbAH7DZyX7aV3wnFI:hW5qoUbc7kAH7DaAuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26dab6e00ca2c5a320354bd74169522b_JaffaCakes118

Files

26dab6e00ca2c5a320354bd74169522b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3497d79f7018c6b99d65b01f799d02a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

_unlock
__dllonexit
_lock
__set_app_type
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_onexit
calloc

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrcpyA
GetModuleHandleA
GetProcAddress
IsDebuggerPresent

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.DiCjS
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ