JaffaCakes118_26a6426bf35205aa4343be177708a80f | Triage

Sharing

General

Target

JaffaCakes118_26a6426bf35205aa4343be177708a80f
Size

178KB
MD5

26a6426bf35205aa4343be177708a80f
SHA1

e749dcc8b3a0fc5f8a30bce13564cd486b94b07e
SHA256

0c08ffea58deb4d613a7f395153c4e73f1f009d3e8a00f4b751c9bc92eb7f664
SHA512

8a3b76c79dac8b1484c551afe85858169dea0428f295eb2f1f30b366b117abdb606e1a40439317f7165b6bc6fe4722069fc5f6561eddae61b3736824bbf2df11
SSDEEP

3072:p5JCHBSS9NNPFA6Lr4MHFr+3ZvWyf1K98qD5sBlAkAz8tAFwknPKtZU:pISI3Fn0Mlr+JKKUuLrBdkPKtZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_26a6426bf35205aa4343be177708a80f

Files

JaffaCakes118_26a6426bf35205aa4343be177708a80f
.exe windows:4 windows x86 arch:x86

f05448131d48cec68080f93ee9f69e5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
SetFirmwareEnvironmentVariableW
LCMapStringA
GetLastError
GetModuleHandleA
LeaveCriticalSection
GetProcAddress
LocalAlloc
LocalFree
SetStdHandle
EnumResourceTypesA
GetSystemInfo
DeleteCriticalSection
GetShortPathNameA
InitializeCriticalSection
LoadLibraryA
LCMapStringW
GetStringTypeA

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

winmm

timeGetTime
timeSetEvent

gdiplus

GdipCloneImage

ole32

OleSave
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ