26ed77a3996faa8ca05abe5b55464277_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ed77a3996faa8ca05abe5b55464277_JaffaCakes118
Size

73KB
MD5

26ed77a3996faa8ca05abe5b55464277
SHA1

c3dd38bea7a73905bbb6dfb50be88fcc2dd82a20
SHA256

a33a2f70dfd3a3c91e5117101bf26f3a3a2b2301b346ba6f252cc3a5f93a5cf5
SHA512

72a1c7092fe2b47e253e700165cb4ba84134254b52d0e3188db1848287edc4c7df3f54d81a07f69139a572ba7f9953d8a81aa7a1c276e324753e30bafdd253e7
SSDEEP

768:fLe2408PFlgfcSiKEnJH1UteFgkWhJ0DjzR7ylyx6T6NK2JwOGq9vNQmChZYLW:Te2clgf5MVUte6TJOhylU6T6FmENQLYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26ed77a3996faa8ca05abe5b55464277_JaffaCakes118

Files

26ed77a3996faa8ca05abe5b55464277_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5e361eaa0c4a8d1ac0aa2b859040cb42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExA

kernel32

LoadLibraryA
CreateFileA
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetLastError
FindResourceExA
LockResource
LoadResource
FindResourceA
WaitForSingleObject
CreateThread
SetLastError
IsBadReadPtr
VirtualProtect
VirtualAlloc
HeapFree
HeapAlloc
CloseHandle
ReadFile
SetFilePointer
GetStartupInfoA
GetCommandLineA
GetProcessHeap

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ