26b7bcbd48354d5bc967702c97a99f27_JaffaCakes118

General

Target

26b7bcbd48354d5bc967702c97a99f27_JaffaCakes118
Size

238KB
MD5

26b7bcbd48354d5bc967702c97a99f27
SHA1

0c1752f5564d62765b8077142a2714c08837db72
SHA256

02c543dc18760d9e0b8e8b926d570b3047a44ccd538535e941e3499191fe7fbf
SHA512

a778b18648a57ff1564d21f2918821375a7dd808fb623f9daa8f731a3aeba18764c1844d95e989034bcc41e0703788128000598cc00dcaa032c7827f81fcd22b
SSDEEP

6144:131qVflBj0mzQHiqaC4xlVy9TQKDQlwdiVJteR/WX5ZnnvwlPr6Lbpo:1ACaCG5h2AJt7jnolT6LO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26b7bcbd48354d5bc967702c97a99f27_JaffaCakes118

Files

26b7bcbd48354d5bc967702c97a99f27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12dec5493f54f6c29aa980964264fa5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
GetCPInfo
GetDiskFreeSpaceA
AddAtomA
SetUnhandledExceptionFilter
InitializeCriticalSection
FreeEnvironmentStringsW
CloseHandle
UnhandledExceptionFilter
Sleep
WideCharToMultiByte
GetEnvironmentStringsW
lstrcpynA
MultiByteToWideChar
CreateFileA
EnterCriticalSection
GetProcAddress
SetFilePointer
GetFullPathNameA
GetTickCount
SetStdHandle
GetStringTypeW
GetStringTypeA
EnumResourceNamesW
lstrcpyA
GetThreadLocale
WriteFile
lstrcatA
GetLastError
IsBadReadPtr
GetModuleHandleA
IsBadCodePtr
VirtualProtect
lstrlenW
FindFirstFileA
lstrlenA
GetCurrentThreadId
lstrcmpiA
lstrcmpA
GetStartupInfoA
GetFileAttributesA
LCMapStringW
LoadLibraryA
LCMapStringA
MulDiv
ReadFile
GetEnvironmentStrings
LeaveCriticalSection
GetOEMCP
FreeLibrary
FlushFileBuffers
DeleteCriticalSection
RaiseException

setupapi

CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 149KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12dec5493f54f6c29aa980964264fa5b

Headers

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 149KB - Virtual size: 284KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 130KB - Virtual size: 130KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 149KB - Virtual size: 284KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 130KB - Virtual size: 130KB

.rsrc
Size: 512B - Virtual size: 4KB