26d76ec12bcf5504f54cc8655e03a539_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26d76ec12bcf5504f54cc8655e03a539_JaffaCakes118
Size

151KB
MD5

26d76ec12bcf5504f54cc8655e03a539
SHA1

8b80f043c4ff02bb7b11b9cfb91fb4b2a52d8e6a
SHA256

6c15bd8db350fdec6d8d63f9f1386c33ab15b8088c24967195ccee7fbe20a9d3
SHA512

12c625c528378aee5f1c9b98a1a3bef449c92243844f8d8d9250693513c3f4d95681c4f5500c1fbcf8f11ec54132b37ac0e6b63972a020b33a63dae0a0e12556
SSDEEP

3072:E5X0QsA6MiJd4B3/v8nPLYCxc3QgEKHx7QTebb36ZgN6N6RYAXgAZVqmO:M0aOd6v2bnrKHxmebagN6N6RYAXgA1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d76ec12bcf5504f54cc8655e03a539_JaffaCakes118

Files

26d76ec12bcf5504f54cc8655e03a539_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e67b87723042c25d2b3833105939b72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconA
SHGetFileInfoA
ExtractIconW

comctl32

ImageList_Draw
ImageList_Create

gdi32

CreateDIBSection
SetPixel
ExtTextOutA
StartDocA
StartDocW
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
GetTextColor
EndDoc
SetBkColor

dpmofilt

_FExp
_Tolower
_Denorm
_Stod
_Strxfrm
_Stof
_LSinh
_LDtest
_FCosh
_Strcoll
_Hugeval
_LXbig
_LExp
_Getctype

user32

CreateWindowExA
MapWindowPoints
GetWindowRect
GetWindowTextA
OffsetRect
CheckRadioButton
SetCursor
ShowCaret
MessageBoxA
OpenClipboard
UnhookWindowsHookEx
CallNextHookEx
EnumChildWindows
EnableMenuItem
DestroyWindow
GetWindowDC
GetMenuItemCount
InvalidateRect
GetWindowThreadProcessId
SetActiveWindow
WindowFromPoint
EmptyClipboard
DrawFocusRect
GetClientRect
ReleaseDC
TranslateMDISysAccel
GetMessageA
CreateWindowExW
GetKeyboardType
ShowWindow
GetClassLongA
LoadImageA
GetClassNameA
CallWindowProcA
GetWindowTextW

kernel32

VirtualProtect
lstrcmpiA
VirtualQueryEx
lstrcatA
DeviceIoControl
lstrlenW
TlsSetValue
FindClose
ReadFile
CompareStringW
GetProcessHeap
GetTempPathW
UnhandledExceptionFilter
FileTimeToSystemTime
FindResourceA
GetModuleHandleA
OpenFileMappingA
GetCPInfoExA
UnmapViewOfFile
EnumSystemCodePagesA
WriteFile
SetPriorityClass
TerminateThread
SwitchToThread
GetFileAttributesA
GetTickCount
GetCommandLineA
VirtualAlloc
GetTempFileNameW
MapViewOfFileEx
TerminateProcess
GetCurrentThread
GlobalMemoryStatus
SetFileAttributesW
GetStdHandle
WaitForMultipleObjects
CreateFileMappingW
DosDateTimeToFileTime
VirtualQuery
FreeLibrary
WriteProcessMemory
LocalFileTimeToFileTime
LoadLibraryExA
MoveFileW
GetTempPathA
Sleep
FileTimeToDosDateTime
CloseHandle
FindFirstFileW

winspool

OpenPrinterA

advapi32

RegOpenKeyExA
RegDeleteKeyA
AdjustTokenPrivileges

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e67b87723042c25d2b3833105939b72

Headers

DLL Characteristics

File Characteristics

Imports

shell32

comctl32

gdi32

dpmofilt

user32

kernel32

winspool

advapi32

Sections

.text Size: 144KB - Virtual size: 148KB

.rdata Size: 3KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 148KB

.rdata
Size: 3KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB