26e61b6715ea4a8ca3db2001cc6fd0b4_JaffaCakes118 | Triage

Sharing

General

Target

26e61b6715ea4a8ca3db2001cc6fd0b4_JaffaCakes118
Size

24KB
MD5

26e61b6715ea4a8ca3db2001cc6fd0b4
SHA1

572da065b28c0b7e5ae35d1079be531ea843d313
SHA256

dfedf330a3264b3d4c05256ac1626f469a0d8c9e72bf0c44ab53b37de9ae6d26
SHA512

cb035e5a65da89a9e6aabc1d07633ad7445d8ccfc56d61cee8c6fefe4854e5223162dfe702aa8dcdd191e1f937ca609b38a8fbc57f0d3fad27715a49f52ac05e
SSDEEP

96:ShkB2MkDbuntw1hlDtVs5FfzfjAGWSreed4tF:ac5h6/gHfzfT0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e61b6715ea4a8ca3db2001cc6fd0b4_JaffaCakes118

Files

26e61b6715ea4a8ca3db2001cc6fd0b4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c66e0861537c46a6295a120a823b05b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileA
LoadLibraryA
GetProcAddress
GetCurrentProcess
lstrcatA
GetCurrentProcessId
GetLocalTime
lstrcpyA
GetCurrentThreadId

user32

SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
SetWindowsHookExA
GetKeyboardState
CallNextHookEx
GetActiveWindow
wsprintfA
GetWindowTextA
ToAscii

msvcrt

_adjust_fdiv
malloc
_initterm
free

Exports

Exports

SK

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 927B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ