26c2bbf8cee86ebce5abc8537e7e2586_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c2bbf8cee86ebce5abc8537e7e2586_JaffaCakes118
Size

183KB
MD5

26c2bbf8cee86ebce5abc8537e7e2586
SHA1

48110dee5157646b004480924315016bf0b5b2f8
SHA256

76dc82de38ea30e310b29ddb6736fc7b1ae2972ccc3ba1ec2fe032c100200288
SHA512

891795542717aa61803421d0063457e439ef42480dbc17baa57886877332ba99597b001baaba8dbbd3234cf9dba848bd4b493030c24d03f4036298b8e0200874
SSDEEP

3072:1ArwbHA9gOw/QcYw5xtwjeXZIox79bBsKfmknSFbR80NwaMTMx0ixBX:1AMHALQdxtX779V1rS5waMQx0WB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c2bbf8cee86ebce5abc8537e7e2586_JaffaCakes118

Files

26c2bbf8cee86ebce5abc8537e7e2586_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d5333d5cd1f5678f43bdea4025a8064

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

kernel32

CloseHandle
GetCalendarInfoA
GetModuleHandleA
GetProcessHeap
LoadLibraryW
GetSystemTime
HeapDestroy
LeaveCriticalSection
FindResourceExA
CreateFileW
GetVersionExA
SystemTimeToFileTime
HeapAlloc
EnumResourceNamesA
FindFirstFileW
LoadLibraryExW
LockResource
GetStdHandle
SizeofResource
FindResourceA
LoadResource
HeapFree
lstrcpynW
WriteFile
TerminateProcess

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ