a26906c09acbcd300aa4a7f237249282_JaffaCakes118 | Triage

Sharing

General

Target

a26906c09acbcd300aa4a7f237249282_JaffaCakes118
Size

74KB
MD5

a26906c09acbcd300aa4a7f237249282
SHA1

294868f580a8cf338ca7fcd2a713b8b6b84434d1
SHA256

20165d77c3851851b5df4fa23850bf02ebf990fbb80d387d0007b4ba52ac64a3
SHA512

034a75a85e31cc8532823ecdb22f076af386fcda6f750c15e44d13d811d4646bf5b6fd28764e04bb8e1c36c4ec27b1a6fd2b7b3d256a1d36cef3cd108e56daea
SSDEEP

1536:IVd5aji/ori2ozCLWpvQxJtdXVIvyU7aSYCQXD:IVd5ajJrolpIxJt3IvX2aiD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a26906c09acbcd300aa4a7f237249282_JaffaCakes118

Files

a26906c09acbcd300aa4a7f237249282_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94400fe3e62cd2376124312fe435b8e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA

kernel32

GetModuleHandleA
HeapAlloc
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
WriteFile
SizeofResource
SetFileAttributesA
RtlMoveMemory
LockResource
LoadResource
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GlobalFree
GetProcAddress
GetProcessHeap
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
HeapFree

shlwapi

PathFindFileNameA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE