26f22b87440810ab0943802d7ecfc8f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f22b87440810ab0943802d7ecfc8f0_JaffaCakes118
Size

110KB
MD5

26f22b87440810ab0943802d7ecfc8f0
SHA1

364e38c6d1624437190d17eb095a55a4a42f54a6
SHA256

34e2744ce15eab6750241a29c83716e2a3ee75f9d16c88b107ea4611357d06d2
SHA512

aa480fbdd6d8938c934d5926006fa7c4f2ea59a0036f1080f6709ceb34ba93aec646a964ba7a911f360afe765d3a164019c8180c984ee92608c515a98a705e87
SSDEEP

1536:eN4GL/sFYqOPBJuqAYqy/5ZLEUU/spks62R/tLsaNIBksZ/qXWzRfa/:4nBJuwP7csaqR/KNasJAWzRa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f22b87440810ab0943802d7ecfc8f0_JaffaCakes118

Files

26f22b87440810ab0943802d7ecfc8f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2379d4e2866dc0e11fc1c32f4cae9bb6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetCommandLineW
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE