26b2b53beb1b9ea3d3cc59c720652716_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26b2b53beb1b9ea3d3cc59c720652716_JaffaCakes118
Size

247KB
MD5

26b2b53beb1b9ea3d3cc59c720652716
SHA1

83c1d0f85b5f0ab5cd1fa8d46fdd91b780f2177a
SHA256

328505430fc0b6d1b8148f438e5a74190b987abdc011048b085f4f448a8b2766
SHA512

d83f5cff301ebcc41396eb586b3c2bac4203689d6dc167f299fdedd0f56d3f1a3ae1baa61370da7dc2db191f7b326f3df934547a140adaf0354015fa9f9c501f
SSDEEP

3072:iypmMoKGWunhATmKH3rim09M4dUe8LrqI9FU2b:uNn+/7iPM4d9ohv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b2b53beb1b9ea3d3cc59c720652716_JaffaCakes118

Files

26b2b53beb1b9ea3d3cc59c720652716_JaffaCakes118
.dll windows:4 windows x86 arch:x86

02d76c393feb8d385167a85a006ffd29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableWindow
GetParent
ReleaseDC
DrawTextW
DrawFrameControl
FillRect
IsRectEmpty
GetClientRect
DestroyWindow
SetWindowPos
ShowWindow
IsWindowVisible
IsIconic
ToAscii

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

Exports

Exports

wqQOXieeC

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adata
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ