26101bf44a8cc6092f38445f1d5158bb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26101bf44a8cc6092f38445f1d5158bb_JaffaCakes118
Size

140KB
MD5

26101bf44a8cc6092f38445f1d5158bb
SHA1

2ce4fce82bcf39d8caf8ec982232d04abf9ff28d
SHA256

1b9983a29803eb197cf98110071e8d0f5aad9fe01686b64e38817f80bb3434ca
SHA512

73b151475a97dc387b1f5d357a978f2738569aa4a4346775ed030d3b1416b3ed7df593dc7d1d3b34f832738d2f45175b15e06721f119c9e435b66d5af3db1376
SSDEEP

1536:sGLxvStq77K2cEYfFc5k2ZaRoyvLrbL585Gy1SE2zyCOB73rVjm0o5IMRBu8bF8x:PP7HcEMgNZcoah8hSBy1V7VjmnBux6Of

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26101bf44a8cc6092f38445f1d5158bb_JaffaCakes118

Files

26101bf44a8cc6092f38445f1d5158bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb56a1a5406f4145eeec2da9ae1a3ddc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetVersionExA
GetSystemDirectoryA
LoadLibraryA
GetModuleHandleA
lstrcatA
SetErrorMode
GetPrivateProfileStringA
HeapReAlloc
LCMapStringW
LCMapStringA
GetLocaleInfoW
GetOEMCP
GetACP
GetLastError
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetVersion
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
GetUserDefaultLCID
EnumSystemLocalesA
lstrcpynA
IsValidCodePage
lstrlenA
GetSystemDefaultLCID
GetProcAddress
GetLocaleInfoA
GetWindowsDirectoryA
lstrcpyA
lstrcmpiA
ExitProcess
IsValidLocale
GetStartupInfoA
GetCPInfo
HeapAlloc
HeapFree
GetCommandLineA

user32

GetCursorPos
EnableMenuItem
CreateWindowExA
wsprintfA
FindWindowA
RegisterClassA
LoadIconA
LoadCursorA
GetWindowLongA
WinHelpA
KillTimer
DefWindowProcA
PostQuitMessage
SetWindowLongA
PostMessageA
MessageBoxA
LoadMenuA
GetSubMenu
DispatchMessageA
RegisterWindowMessageA
SetForegroundWindow
TrackPopupMenu
DestroyMenu
ModifyMenuA
InsertMenuA
DeleteMenu
SendMessageA
DestroyIcon
GetMessageA
TranslateMessage

gdi32

CreateDCA
DeleteDC
ExtEscape

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

shell32

FindExecutableA
Shell_NotifyIconA

winmm

timeGetTime

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.2rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cb56a1a5406f4145eeec2da9ae1a3ddc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 4KB

.2rdata Size: 72KB - Virtual size: 72KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 4KB

.2rdata
Size: 72KB - Virtual size: 72KB