26defa7c6b8e12feea9b3dda0428876e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26defa7c6b8e12feea9b3dda0428876e_JaffaCakes118
Size

388KB
MD5

26defa7c6b8e12feea9b3dda0428876e
SHA1

7947934edb3ad347e1ddfe0ea5f143c63ba90188
SHA256

62ef555ca348cb36b58dbe187d915ed49381611e35d936b241f31c8eab5248f5
SHA512

1935ee002899e130d8249717c1d620838799d588e7eb26d39c792873421ece6611c6557729f8a7be868434f4ed1a1272fed38f1748cbf530269e1ad86caf3ecd
SSDEEP

6144:cN8hIWFzVv+oJvHTy0RuH0KIomFDMyuR+2HJ8zTEdxHDnK:qEVvdvHDR0MDMvR+2p4Ed5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26defa7c6b8e12feea9b3dda0428876e_JaffaCakes118

Files

26defa7c6b8e12feea9b3dda0428876e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9cbb35f5fc152ef097fc816df30091bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualLock
EnumResourceNamesW
GetPrivateProfileStringA
ScrollConsoleScreenBufferA
IsBadReadPtr
CreateDirectoryW
GlobalAddAtomW
GetUserDefaultLangID
FormatMessageW
SetEnvironmentVariableW
EndUpdateResourceA
GetCommModemStatus
SetupComm
VirtualAllocEx
SetVolumeLabelA
WritePrivateProfileStructA
PeekConsoleInputW
SetErrorMode
lstrcpyA
GetModuleHandleA
CreateMutexA
SetHandleCount
ExitProcess
FindCloseChangeNotification
FatalAppExitA
GetBinaryTypeA
lstrcmpiA
DuplicateHandle
CreateProcessA
OutputDebugStringW
IsProcessorFeaturePresent
CompareStringW
CreateIoCompletionPort
WriteConsoleOutputW
CreateFileW
MoveFileW
SetEnvironmentVariableA
TlsGetValue
GetLongPathNameA
FindFirstFileW
GetProcessHeap
GetPrivateProfileStringW
SetCurrentDirectoryA
GetCurrentProcessId
GlobalDeleteAtom
CreateDirectoryExA
GetCommConfig
VirtualProtect
GetVersionExA
GetProfileStringA
CreateDirectoryA
SystemTimeToFileTime
SetThreadAffinityMask
OutputDebugStringA
GetSystemDirectoryW
FlushFileBuffers
IsValidLocale
GetFileAttributesExA
TryEnterCriticalSection
WritePrivateProfileSectionA
EnumSystemCodePagesW
GetLocaleInfoW
WritePrivateProfileStringA
GetCommandLineW
GlobalAddAtomA
SetTimeZoneInformation
SearchPathW
lstrcmpiW
EnumCalendarInfoA
GetShortPathNameA
UnhandledExceptionFilter
GlobalFindAtomA
lstrcpynA
GetTapeParameters
WriteProcessMemory
SetThreadPriorityBoost
GetFileType
GlobalFree
GetTimeZoneInformation
FormatMessageA
GetHandleInformation
SetFileAttributesA
ReadConsoleInputW
GetCommandLineA

user32

SetPropA
CreateDialogParamA
LoadMenuW
ModifyMenuW
CallWindowProcA
CharPrevW
MonitorFromRect
MapVirtualKeyW
EnableMenuItem
GetClipboardFormatNameW
UnregisterDeviceNotification
GetSystemMenu
CopyRect
IsRectEmpty
GetScrollRange
SystemParametersInfoA
GetClassInfoA
EnumDesktopsA
AppendMenuA
GetWindowDC
GetIconInfo
EnumThreadWindows
wsprintfA
ScrollWindow
EnumChildWindows
MessageBeep
keybd_event
GetTopWindow
wsprintfW
GetUserObjectInformationW
CharToOemBuffA
RegisterClassA
SetWindowRgn
WaitForInputIdle
CloseWindow
SetProcessDefaultLayout
GetCursorPos

comdlg32

GetFileTitleA

advapi32

CryptReleaseContext
RegDeleteValueA
CryptEncrypt
ControlService
CryptAcquireContextW
RegEnumKeyExA
GetUserNameA
RegSetValueExW
RegUnLoadKeyW
FreeSid
RegDeleteKeyA
EnumServicesStatusW
SetNamedSecurityInfoA
RegEnumKeyExW
RegCreateKeyW
DeleteService
RevertToSelf
IsValidSid
CloseServiceHandle
SetPrivateObjectSecurity
SetFileSecurityA
MakeAbsoluteSD
LookupPrivilegeDisplayNameA
SetSecurityDescriptorGroup
RegRestoreKeyW
ImpersonateSelf
RegisterServiceCtrlHandlerW
AbortSystemShutdownW
GetAce
LookupPrivilegeValueW
RegEnumValueA
SetEntriesInAclA

shell32

SHChangeNotify
DragQueryPoint
FindExecutableW
ExtractIconExW
DragFinish
SHLoadInProc

ole32

ProgIDFromCLSID
OleBuildVersion
IIDFromString
OleCreate
GetRunningObjectTable
CreateBindCtx
OleQueryLinkFromData
OleConvertIStorageToOLESTREAM
GetClassFile

oleaut32

SysFreeString
SysStringLen
LoadTypeLibEx
LoadTypeLi
SafeArrayUnaccessData
SafeArrayGetLBound
SafeArrayPutElement

comctl32

ImageList_DragEnter

shlwapi

UrlCanonicalizeW
PathRelativePathToA
AssocQueryKeyW
SHRegSetUSValueW

Sections

.text
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9cbb35f5fc152ef097fc816df30091bf

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 332KB - Virtual size: 330KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 44KB - Virtual size: 40KB

.text
Size: 332KB - Virtual size: 330KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 44KB - Virtual size: 40KB