26ef90b62b6435f586a6f045d85a49aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26ef90b62b6435f586a6f045d85a49aa_JaffaCakes118
Size

271KB
MD5

26ef90b62b6435f586a6f045d85a49aa
SHA1

bd3287b9d51d050c383b859cb0eaf33081e953a3
SHA256

b886fe2f66e15dbaa833c89da440906a599aef2d925f4311cb9a9d07b8b7d3be
SHA512

3bab21c40fab96e8ffe15b7e006e951a254541bbea57e01e44902f827cd6e7132fecdcf2a1fc4155afef84f0a6995b06b108a566385fc8b2d821883ef827bd81
SSDEEP

6144:YCFk8I0hefI0Azu7Y9UXNLei5VP/Bfs46GqhNcvhFXrX+exR:nFk8I0gIdzl9IZhk46GLXrX+exR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26ef90b62b6435f586a6f045d85a49aa_JaffaCakes118

Files

26ef90b62b6435f586a6f045d85a49aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ