d26eb28b06641aeb8951df4d592953b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d26eb28b06641aeb8951df4d592953b6_JaffaCakes118
Size

16KB
MD5

d26eb28b06641aeb8951df4d592953b6
SHA1

2387dcd37b5b96ce8d0d158afd37559aaeb33c55
SHA256

8cb83432740c8a583536ad50ede7d52d819e0133dc248231db201b0a654e81cd
SHA512

3127bef4e8eb296f65ea84401d380b1f772b61f71c72d74419e1e7000e0dbbf1a51c228361a27c4fde8aa3b5a54b18db31abcbab551b3ff1513ff0726440a0a6
SSDEEP

384:XbH2Ypwn3f02CeLiKjocbyNF1XwUk+o5o335QDI:XK/3/iKjocbyNbXnkC5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d26eb28b06641aeb8951df4d592953b6_JaffaCakes118

Files

d26eb28b06641aeb8951df4d592953b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73b2f6be3057ef9278063a426f914ba0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_lseek
sprintf
strncpy
_write
_read
free
??2@YAPAXI@Z
fclose
fputc
fgetc
fread
fseek
fopen
_exit
time
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
_open
_close
_XcptFilter
malloc

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ