026dbc1092620f223473134959b427dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

026dbc1092620f223473134959b427dc_JaffaCakes118
Size

360KB
MD5

026dbc1092620f223473134959b427dc
SHA1

140e664b3ef91ecf482bab99731f21ea1e86a1db
SHA256

dbb5d0815f3b4f0e1bf1c5f4daaf882815de3e9320fe26cc5a998bc6f955f3f2
SHA512

15c2a4ac9e7843aea2b23d487f1a4621cfe6856c805c843d3ea93d685fb2613f87608b954265345b6bd1537b4d0367e92e406a6d01cb12727f9f2d4a0e2f6976
SSDEEP

6144:HqFR7KZCrb1cCmau04y8Zm+6wdeg71FaF+1hbm2PtGCxEPg5A:5ZCrZuaCy88Od71Fag1h0l4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026dbc1092620f223473134959b427dc_JaffaCakes118

Files

026dbc1092620f223473134959b427dc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

722b2da0c44512df8044bcb578b08fbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegLoadKeyA
RegQueryValueExW

user32

GetDC
DrawIconEx
BeginPaint
LoadCursorA
GetWindowTextLengthA
AlignRects
CloseWindow
GetCursor

Sections

.4ch4
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1adc6
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.b64b
Size: 294KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.30dgd
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eb5a
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ