26840c2026b33edd30a317f4281c5d80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26840c2026b33edd30a317f4281c5d80_JaffaCakes118
Size

188KB
MD5

26840c2026b33edd30a317f4281c5d80
SHA1

ed4fb05b5ad1a5fc15aece5ca0fb19e550a11e6a
SHA256

dfb044456b9e9219407c21ba37e34b2242b1bf0ec0a8598ed03c491201043e0a
SHA512

1f1bb1dbe7cb975ab829df7d520c68dbf5404744dad2ffb8c06e3b383354458c1aa15484b558ac3140da3c426597b7b967c776757ff0a9cef75b147646aaeffc
SSDEEP

3072:Sk4FCxJHa9Nd5rUjkyU4iZZcAxRhG8jcQQ1Kqu+FebmG2p4VvJ:S7FCx25wjkte1QQ1Q+0bt8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26840c2026b33edd30a317f4281c5d80_JaffaCakes118

Files

26840c2026b33edd30a317f4281c5d80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6b071c57a7dc3ff81561a979c850bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineA
GetLastError
GetModuleHandleA
ExitProcess
LoadLibraryA
GetCommandLineW
ExitThread
GetProcAddress
GetOEMCP
IsBadHugeReadPtr
lstrlenW
GetACP
IsBadReadPtr
GetModuleHandleW

Sections

CODE
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ