26a624ce2c457eaa70e6b6e81d90ba92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a624ce2c457eaa70e6b6e81d90ba92_JaffaCakes118
Size

139KB
MD5

26a624ce2c457eaa70e6b6e81d90ba92
SHA1

be0d0ad44f6badaeb10d8ffd05411ef6815c05a8
SHA256

bcb2cadb16dec2c99cfcc44d7d58a236d9e4f466d84e0d6d779793262070acb6
SHA512

db3e1270ba465237a7561a8bb764e84537d0b7ae01b2240974e959b72cfcc7ca6b9f29b10e9489fe428a73f37c99cbad58c30518b3fbc5d9292ef393219cdf70
SSDEEP

3072:VNFNiRj7gApcwR5JE8UzAHuyWtiDDBqD6qwtgQ:VNFNb+r7JDRHuyWtiDDBqeqwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a624ce2c457eaa70e6b6e81d90ba92_JaffaCakes118

Files

26a624ce2c457eaa70e6b6e81d90ba92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc74d48d5dae4265b66654aecc4fa9ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

CloseCluster

comctl32

InitCommonControlsEx

user32

EnumDisplaySettingsW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW

kernel32

Sleep
TerminateThread
SetUnhandledExceptionFilter
QueryPerformanceCounter
CreateIoCompletionPort
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
EnumResourceNamesW
InterlockedCompareExchange
GetCurrentProcessId
TerminateProcess
ExitProcess
InterlockedExchange
GetCurrentThreadId
UnhandledExceptionFilter
GetCurrentProcess

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ