26701813ab57da03bcef05b293e67bf2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26701813ab57da03bcef05b293e67bf2_JaffaCakes118
Size

208KB
MD5

26701813ab57da03bcef05b293e67bf2
SHA1

c60efe2079048d11570406762157a4ddc2600425
SHA256

ee5fbb82c8d179f058aae05072c0258cb8eefaf795c0b86f28ebd2db754635e0
SHA512

c4aa9b4310c3cc53454c15f83e80a10dfb60b63fea9e95f80b1fce226b5ad873618e9f9519e18ef94c6a2e7261a233e4538612225a17657d652fc08f758fb736
SSDEEP

6144:ixTxdfazK2verXrCQQ5lLg17L6cs9taFy+vC:axN6viXrC15hg17ucWaUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26701813ab57da03bcef05b293e67bf2_JaffaCakes118

Files

26701813ab57da03bcef05b293e67bf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eff2ce21e3593b9bc6187b7183f4a975

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ