26f1d2f221f22b34f513f2c99b946e35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f1d2f221f22b34f513f2c99b946e35_JaffaCakes118
Size

15KB
MD5

26f1d2f221f22b34f513f2c99b946e35
SHA1

50b443dd73820745873b9e403833f7e9d363f6de
SHA256

cd132030a3a1cb41eee553340f8aacdb878cf3bd1db186671f3f2bd2ee2eabd9
SHA512

af1a4e8fb345c823d0a9974a82f786b3c3cf05d573be4b8c21b747e82f24d7c8818caf77651414e0fb7c80d627dd3b53f07a56e9c0de4745e86f812f5fd00ec6
SSDEEP

192:Li5vZOgyaykTr58py2vfRcL6hkBM5Im2sYs+Af0P1oynxa4Nq93jDwM:LkErXM58py2Xc0zNTTa1C4Nm3/wM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f1d2f221f22b34f513f2c99b946e35_JaffaCakes118

Files

26f1d2f221f22b34f513f2c99b946e35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c02e34a1072cd26ab76f3e1445f0d2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

free
_open
??2@YAPAXI@Z
fclose
fputc
fgetc
fread
fseek
fopen
sprintf
strncpy
_write
_read
_exit
_close
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_lseek
time
srand
rand
_XcptFilter
malloc

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ