e26f22411e2b8ce425ced3cd38e77bb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e26f22411e2b8ce425ced3cd38e77bb0_JaffaCakes118
Size

140KB
MD5

e26f22411e2b8ce425ced3cd38e77bb0
SHA1

e015b0909be5c2c703c19a33268a555041b44a36
SHA256

cf4f4f4fa22fa4e23e635929eda85dc2b346b7a4ee0a68af0cb63b2f60915502
SHA512

a218c05b05d163edc41348e0768de9655e1fd3a08c8c86ef71a601be3c1b9aedc80474a53000fb9a28c04f6278fb1640c6bd2908c27f865ec6baa7c06158b68e
SSDEEP

1536:PlrsNON2vC8GqQRIWqfoqVVy08hoQK54uZEKc2TIvKDLvxXtKgDXAgk/r0owDrj:PloONRd1aJ4wEKcfvYvxXtKJgmKH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e26f22411e2b8ce425ced3cd38e77bb0_JaffaCakes118

Files

e26f22411e2b8ce425ced3cd38e77bb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88dab687fa9ee860bc2c24b861c5e8b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp

kernel32

GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

SystemParametersInfoA
MessageBoxA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

imm32

ImmInstallIMEA

Sections

.text
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsf0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.dsf1
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ