26b286148e6cb948c314b9943eb24eaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b286148e6cb948c314b9943eb24eaa_JaffaCakes118
Size

69KB
MD5

26b286148e6cb948c314b9943eb24eaa
SHA1

65b7734cfc48e005adf30b26d34d502a1d419f30
SHA256

720ab366a315c75b11738f3c0898477bb3c1ff64eb72c93b9e1f4ec5f71a7c7b
SHA512

1adbd8c562d1018d065283cedacfc8673324dd5d089042b966262a1bc11897a04f9f0667dfebca51b6e5519c6fd7bf1bcf7415fc2c086e0a546bdfd6e93a7abe
SSDEEP

1536:w1Eqdki36YNRBYtcM6unFbTVI7dKDBWQiWeix:w1Eq936yYtP6EFbTedKRjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b286148e6cb948c314b9943eb24eaa_JaffaCakes118

Files

26b286148e6cb948c314b9943eb24eaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b484f3bbf16613f4cc69eb0e73b83441

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateJobObject
Heap32ListNext
SetUserGeoID
ValidateLCType
Process32First
EnumSystemLanguageGroupsW
DebugActiveProcessStop
SetVDMCurrentDirectories
GetNumaAvailableMemory
GetDefaultSortkeySize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 141KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE