26837d83c892be07c30a1529faa5ab69_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26837d83c892be07c30a1529faa5ab69_JaffaCakes118
Size

760KB
MD5

26837d83c892be07c30a1529faa5ab69
SHA1

dbb8380a5be98264ea5ad6b3687ad7f4b92ecfb0
SHA256

f9478708bdd31937d873905332150988f503c39ef2f6ea753b5d593f87d5f927
SHA512

643ba1358512a2255c216dbd0c36226abf3c45755d722cbbb52090a78c67d52ca7d02a61ac79215e32eb4de43a734bfc96255c5fde692f670ca1353fec8b5dd1
SSDEEP

12288:vLPQ3S9VkKPuZAgBqaJKbEvMov+Bwj69RG3iWuRbVTy4sOnWIabtILarugfd9EVD:vLP6S/PuiM+Sj26JufeCnWI0ILsfd9EU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26837d83c892be07c30a1529faa5ab69_JaffaCakes118

Files

26837d83c892be07c30a1529faa5ab69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f0e5911b85100b4ba157cc5103e896b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\kaye\eruk\eou\llei.pdb

Imports

kernel32

CreateMailslotA
IsBadWritePtr
IsBadReadPtr
DeleteAtom
WriteFile
HeapReAlloc
MultiByteToWideChar
GetPrivateProfileSectionNamesA
TlsFree
GetEnvironmentStrings
OpenMutexA
EnterCriticalSection
HeapValidate
RemoveDirectoryA
WideCharToMultiByte
LocalFileTimeToFileTime
GetCurrentProcess
LCMapStringA
CreateFileMappingA
RtlUnwind
FreeEnvironmentStringsA
RtlMoveMemory
GetExitCodeProcess
GetModuleFileNameA
GetCurrentThread
ExitProcess
GetTimeZoneInformation
GetCurrentProcessId
HeapAlloc
GetOEMCP
TlsAlloc
LCMapStringW
HeapCreate
TerminateProcess
SetCurrentDirectoryA
DeleteCriticalSection
FreeEnvironmentStringsW
HeapDestroy
OutputDebugStringA
HeapFree
GetStdHandle
GetEnvironmentStringsW
UnmapViewOfFile
GetFileType
CreatePipe
GetACP
GetCurrentThreadId
GetSystemTimeAsFileTime
GetLongPathNameW
CreateToolhelp32Snapshot
CopyFileExA
EnumDateFormatsA
SetLastError
VirtualFree
InterlockedIncrement
GetStringTypeA
SetStdHandle
GetCommandLineA
EnumResourceTypesA
VirtualQuery
CreateMutexA
CompareStringA
GetVersion
QueryPerformanceCounter
ReadFile
FlushFileBuffers
GetLocalTime
GetModuleHandleA
InterlockedExchange
SleepEx
SetHandleCount
InitializeCriticalSection
LeaveCriticalSection
GetProcAddress
WaitForDebugEvent
SetEnvironmentVariableA
ReadConsoleOutputAttribute
GetStartupInfoA
lstrcmpA
GetEnvironmentVariableW
GetThreadLocale
SetFilePointer
UnhandledExceptionFilter
GetLastError
VirtualAlloc
TlsSetValue
GetStringTypeW
CloseHandle
GetWindowsDirectoryW
TlsGetValue
GetTickCount
GetCurrentDirectoryW
GetCPInfo
GetSystemDirectoryA
SetConsoleCtrlHandler
GetSystemTime
InterlockedDecrement
DebugBreak
LoadLibraryA
CompareStringW

comctl32

CreateUpDownControl
InitCommonControlsEx
ImageList_LoadImageW
CreateStatusWindow
ImageList_GetImageCount
InitMUILanguage
ImageList_DragLeave
ImageList_AddIcon
ImageList_DrawEx
ImageList_Remove
GetEffectiveClientRect
MakeDragList
ImageList_GetBkColor
ImageList_Draw
ImageList_GetFlags

user32

FlashWindowEx
EndDialog
CallMsgFilterA
DdeClientTransaction
LockWindowUpdate
CallWindowProcW
IsZoomed
CreateWindowStationW
TabbedTextOutW
DialogBoxIndirectParamW
CharUpperW
SetProcessDefaultLayout
GetDoubleClickTime
GetUserObjectInformationA
DdeCreateStringHandleW
LoadKeyboardLayoutA
EnumThreadWindows
RegisterClassExW
MessageBoxA
RedrawWindow
RegisterClassExA
InvalidateRgn
UnregisterHotKey
VkKeyScanExW
CreateWindowExW
DefDlgProcW
GetWindowContextHelpId
SetWindowLongA
WINNLSEnableIME
RegisterClassA
OpenClipboard
DrawFocusRect
ToAsciiEx
CreateCursor
GetMonitorInfoW
CreateMDIWindowW
GetForegroundWindow
ChildWindowFromPoint
MessageBoxIndirectW
DefWindowProcW
TrackMouseEvent
SetRectEmpty
GetUserObjectSecurity
IsCharAlphaNumericW
GetListBoxInfo
LoadImageA
DestroyWindow
SetCursorPos
FlashWindow
DlgDirListW
EditWndProc
ArrangeIconicWindows
CreateIconIndirect
TrackPopupMenu
GetKeyboardType
ClipCursor
RemoveMenu
GetWindowModuleFileNameA
DeleteMenu
DefMDIChildProcA
GetClipboardFormatNameW
IsDialogMessageA
CheckRadioButton
SetPropA
ShowCursor
ShowWindow
LoadMenuIndirectA
SwapMouseButton
GetDlgItem
DialogBoxIndirectParamA
GetUpdateRgn

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 452KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f0e5911b85100b4ba157cc5103e896b

Headers

File Characteristics

PDB Paths

Imports

kernel32

comctl32

user32

Sections

.text Size: 96KB - Virtual size: 94KB

.rdata Size: 452KB - Virtual size: 448KB

.data Size: 140KB - Virtual size: 164KB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 96KB - Virtual size: 94KB

.rdata
Size: 452KB - Virtual size: 448KB

.data
Size: 140KB - Virtual size: 164KB

.rsrc
Size: 68KB - Virtual size: 66KB