26c7e93bfb60cd6526e075a16e5719db_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26c7e93bfb60cd6526e075a16e5719db_JaffaCakes118
Size

255KB
MD5

26c7e93bfb60cd6526e075a16e5719db
SHA1

e050f794e0c88488f365a8eb5ac97ff7cf93ca7d
SHA256

9b2e5ed9662e991c79235510ff67cef2ed79cc33f3f435cf956a01827d0d91ae
SHA512

4824d3e1d5872a43db9703e30f99c2ab9d812fcdf618259700880925d0bec45c3282d0349cabdc82ff170f074baa5470ee35cf935201df254a4cfd31c1ebe975
SSDEEP

3072:xuDHXDxNDp84UbMhrltj8ni+VAJTFQzzbUbsSngPun7LbaNCFRL/jmEBfvPJUjVS:OLe4/hJCXexuutIC76wDP3BfvhOC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c7e93bfb60cd6526e075a16e5719db_JaffaCakes118

Files

26c7e93bfb60cd6526e075a16e5719db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3295a23483428486c70ce3cb283a50f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetSystemTime
RtlUnwind
GetVersion
GetModuleHandleA
ExitProcess
FreeLibrary
GetVersionExA
SetLastError
GetDateFormatA
GetTimeFormatA
LoadResource
MultiByteToWideChar
FindResourceA
CopyFileA
LockResource
FreeResource
GetFullPathNameA
SetFileAttributesA
GetWindowsDirectoryA
GetFileAttributesA
GetCurrentDirectoryA
GetDriveTypeA
GlobalFlags
MulDiv
GetStartupInfoA
GetTempPathA
FindNextFileA
lstrcmpA
_lread
GetTempFileNameA
GlobalSize
SetEndOfFile
_lwrite
_lopen
GetProfileStringA
_lcreat
_lclose
FindClose
GetTickCount
FindFirstFileA
lstrcmpiA
DeleteFileA
lstrcpyA
UnhandledExceptionFilter
GetCommandLineA
GlobalAlloc
GlobalFree
GetSystemDirectoryA
GlobalUnlock
LoadLibraryA
GetProcAddress
SystemTimeToFileTime
GetModuleFileNameA
lstrlenA
GlobalLock
GetLastError
lstrcatA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegSetValueExA

user32

SetWindowLongA
ModifyMenuA
RemoveMenu
SetTimer
SetRect
IsIconic
SetFocus
SetForegroundWindow
GetForegroundWindow
GetWindowPlacement
SetWindowPlacement
IsWindowVisible
ShowWindow
SystemParametersInfoA
MessageBeep
AppendMenuA
GetMessagePos
GetAsyncKeyState
IsWindowUnicode
PeekMessageW
GetMessageW
GetMessageA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
IsCharAlphaA
LoadStringA
GetDesktopWindow
LockWindowUpdate
SetDlgItemTextA
DialogBoxParamA
CheckRadioButton
SetDlgItemInt
CheckDlgButton
GetDlgItemInt
IsDlgButtonChecked
DestroyCursor
GetWindowTextA
GetDlgItemTextA
GetFocus
GetDlgItem
IsWindowEnabled
SetWindowTextA
SendDlgItemMessageA
EndDialog
GetClassInfoA
PeekMessageA
GetCapture
ScreenToClient
GetParent
GetKeyboardLayout
ActivateKeyboardLayout
CallWindowProcA
UpdateWindow
GetSysColor
DrawFocusRect
CreatePopupMenu
TrackPopupMenu
ClientToScreen
WindowFromPoint
PtInRect
ReleaseCapture
SetCapture
InsertMenuA
RegisterClassExA
RegisterClassA
CopyAcceleratorTableA
DrawIconEx
LoadMenuA
BringWindowToTop
IsWindow
DestroyMenu
CharPrevA
BeginPaint
EndPaint
LoadBitmapA
MoveWindow
wsprintfA
LoadAcceleratorsA
GetWindowLongA
PostQuitMessage
SetClassLongA
DefWindowProcA
GetKeyState
KillTimer
RedrawWindow
SetWindowPos
GetSystemMenu
EnableMenuItem
SetMenu
GetClientRect
GetMenu
CreateWindowExA
TranslateAcceleratorA
LoadIconA
TranslateMessage
DrawMenuBar
EnableWindow
GetClassLongA
DestroyIcon
DestroyWindow
IsChild
IsDialogMessageA
GetActiveWindow
GetWindowThreadProcessId
InvalidateRect
SendMessageA
LoadCursorA
SetCursor
PostMessageA
GetMenuItemCount
GetSubMenu
WaitMessage
CharNextA
GetSystemMetrics
WinHelpA
GetCursorPos
MapWindowPoints
GetWindowRect
GetDC
ReleaseDC
RegisterClipboardFormatA
RegisterWindowMessageA
MessageBoxA

gdi32

TextOutW
RestoreDC
GetTextFaceA
DeleteObject
SaveDC
RealizePalette
SelectObject
StretchBlt
BitBlt
DeleteDC
GetObjectA
SetBkMode
CreateCompatibleDC
GetStockObject
SetBkColor
PatBlt
SelectClipRgn
CreateRectRgn
SetTextColor
CreateBrushIndirect
GetBkMode
CreateCompatibleBitmap
GetTextColor
SetROP2
GetBkColor
CreateSolidBrush
GdiFlush
GetTextMetricsA
GetDeviceCaps
AbortDoc
GetTextExtentPointW
StartDocA
Escape
EndDoc
GetTextExtentPoint32A
LineTo
CreateDCA
CreatePen
MoveToEx

comdlg32

PrintDlgA
ChooseFontA
CommDlgExtendedError

shell32

DragAcceptFiles
SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA
ShellExecuteA
SHAddToRecentDocs

winspool.drv

DocumentPropertiesA
GetPrinterDriverA
OpenPrinterA
ClosePrinter
GetPrinterA

comctl32

ImageList_ReplaceIcon
ImageList_Create
ImageList_Remove
ImageList_Draw
ImageList_Add
ImageList_AddMasked
PropertySheetA
ord17
ImageList_Destroy

oledlg

ord8

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

mso97

ord605
ord318
ord336
ord601
ord973
ord311
ord266
ord438
ord369
ord338
ord820
ord368
ord340
ord330
ord471
ord464
ord797
ord901
ord607
ord234
ord866
ord960
ord294
ord831
ord509
ord871
ord877
ord608
ord383
ord628
ord785
ord784
ord786
ord557
ord556
ord630
ord560
ord629
ord470
ord590
ord854
ord467
ord690
ord663
ord312
ord326
ord759
ord425
ord923
ord510
ord933
ord322
ord396
ord876
ord401
ord290
ord878
ord886
ord896
ord332
ord440
ord670
ord750
ord844
ord499
ord270
ord589
ord688
ord493
ord847
ord974
ord610
ord887
ord801
ord604
ord442
ord335
ord555
ord447
ord449
ord441
ord429
ord434
ord654
ord606
ord602
ord334
ord347
ord957
ord573
ord313
ord333
ord868
ord639
ord834
ord292
ord915
ord778
ord829
ord517
ord597
ord805
ord594
ord324
ord406
ord924
ord643
ord414
ord430
ord911
ord754
ord393
ord357
ord702
ord695
ord698
ord694
ord439
ord432
ord355
ord431
ord417
ord893
ord894
ord366
ord295
ord693
ord598
ord409
ord474
ord925
ord525
ord926
ord443
ord726
ord487
ord815
ord674
ord538
ord652
ord971
ord593
ord394
ord408
ord725
ord934
ord321

ole32

OleCreate
OleGetAutoConvert
OleIsRunning
CreateBindCtx
OleInitialize
CoRegisterMessageFilter
CoRegisterClassObject
OleUninitialize
CoDisconnectObject
CoRevokeClassObject
OleSetMenuDescriptor
CoCreateGuid
ProgIDFromCLSID
StringFromCLSID
StgCreateDocfile
StgOpenStorage
OleSave
CoFreeUnusedLibraries
CLSIDFromProgID
WriteClassStm
OleCreateFromFile
OleCreateFromData
CreateFileMoniker
OleDoAutoConvert
WriteClassStg
GetClassFile
OleLockRunning
OleLoad
OleRun
ReadClassStg
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
GetRunningObjectTable
OleSaveToStream
CreateStreamOnHGlobal
OleRegGetMiscStatus
ReleaseStgMedium
DoDragDrop
CreateItemMoniker
CreateGenericComposite
OleSetContainedObject
CoGetMalloc
CLSIDFromString
StgIsStorageFile

Sections

.text
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fz
Size: 1006B - Virtual size: 1006B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3295a23483428486c70ce3cb283a50f0

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

comdlg32

shell32

winspool.drv

comctl32

oledlg

version

mso97

ole32

Sections

.text Size: 238KB - Virtual size: 238KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 9KB - Virtual size: 9KB

.fz Size: 1006B - Virtual size: 1006B

.text
Size: 238KB - Virtual size: 238KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 9KB - Virtual size: 9KB

.fz
Size: 1006B - Virtual size: 1006B