26bce42e0cf607b8c0bec010a061f23d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26bce42e0cf607b8c0bec010a061f23d_JaffaCakes118
Size

12KB
MD5

26bce42e0cf607b8c0bec010a061f23d
SHA1

4b8255376a106ff171f3947d231880aec09fcae4
SHA256

1db57b29add6c4a4da41e8c6e29ee2a2dc8222dd74312d8ad86fecec20738f5d
SHA512

6495a17d394a782f0bb1505a08fdf1ae8ba5fdde2a255dffe2e785355d823d47963b6d8e718a2312854ca654669fd1ed273cd8bee4c8fc213cbc2672ebd43024
SSDEEP

384:qqyDH69/Emsriz7R5Wn/oxRh1RY85Njf5PbSgHP:Oa9/EBiz7R58kR+8T9+0P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26bce42e0cf607b8c0bec010a061f23d_JaffaCakes118

Files

26bce42e0cf607b8c0bec010a061f23d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

09e744ec88d65ed44231c9044f6b8532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

gdi32

CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE