26ee9a5f810b5ec343a8a7ab58042c0e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

26ee9a5f810b5ec343a8a7ab58042c0e_JaffaCakes118
Size

116KB
MD5

26ee9a5f810b5ec343a8a7ab58042c0e
SHA1

aaf766c2fe72f989fc84ce654e3c3ee07cb54606
SHA256

9486b8b91fa44dd1e27bfffca3fe58b5c90577c193bfc91ae7ea9b584a683650
SHA512

29fa524b97dc2b6cfc7b4830633c979283a8b3f09dbfddb6b5520cca56f3d60baab2be6a3f2f266ad96bfd6f7c49c5a79b2a84d21575668fa3a1dee91d569bfb
SSDEEP

1536:V3PXKVLA/aH+ZFdYr8Jgpt2Q+gxLB3oh5gd2L6P3NiLWehaF846GDc8Cw3JH:BKMXF6JpxLB3oh5M5diar6sc8R3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26ee9a5f810b5ec343a8a7ab58042c0e_JaffaCakes118

Files

26ee9a5f810b5ec343a8a7ab58042c0e_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

cc9cf8bb0b94257d7b26e8a669566cf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapFree
EnterCriticalSection
CreateThread
LoadLibraryA
MapViewOfFile
VirtualProtect
WaitForSingleObject
CreateProcessA
GetProcAddress
GetModuleHandleA
InterlockedExchange
DeleteFileA
GetComputerNameA
LocalFree
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
GetSystemTimeAsFileTime
GetModuleFileNameA
GetTickCount
CloseHandle
InitializeCriticalSection
GetProcessHeap
VirtualQuery
MoveFileA
GlobalFlags
GetFileAttributesA
WriteProcessMemory
ClearCommError
lstrlenA
FindResourceExW
LCMapStringW
LocalLock
GetShortPathNameA
FormatMessageW
SetEndOfFile
GetProfileStringW
EnumResourceLanguagesW
OpenMutexA
GetLogicalDriveStringsW
VirtualAllocEx
GetModuleHandleExW
ReadDirectoryChangesW
GetVolumeNameForVolumeMountPointW
SetVolumeMountPointW
LocalHandle
HeapUnlock
GetSystemDefaultUILanguage
GetStringTypeA
GetLogicalDriveStringsA
GetAtomNameA
GetDateFormatA
SetVolumeLabelA
MoveFileW
WriteProfileStringA
GetSystemWow64DirectoryW
CreateSemaphoreA
WriteConsoleInputA
SleepEx
OpenMutexW
UpdateResourceA
GlobalMemoryStatus
CreateDirectoryW
GetExitCodeThread
FormatMessageA
GetThreadTimes
SetTimeZoneInformation
GetCurrentDirectoryW
WaitForMultipleObjectsEx
SetInformationJobObject
FindFirstFileExW
VirtualFree
CreateRemoteThread
IsBadReadPtr
GlobalHandle
GetVersionExW
FreeResource
IsBadStringPtrW
SetFilePointer
GetFileInformationByHandle
GetAtomNameW
SetVolumeLabelW
SetConsoleWindowInfo
WriteConsoleW
CreateIoCompletionPort
CreateNamedPipeA
CancelWaitableTimer
CreateProcessW
GetBinaryTypeA
GetEnvironmentVariableA
SetCurrentDirectoryW
FillConsoleOutputAttribute
HeapSize
FindResourceExA
MapViewOfFileEx
FindFirstVolumeMountPointW
lstrcmpA
CreateEventA
GetSystemWindowsDirectoryA
HeapLock
GetEnvironmentStrings
ChangeTimerQueueTimer
GetProfileSectionA
GetLogicalDrives
CallNamedPipeA
lstrcmpiA
SystemTimeToFileTime
GetProfileIntA
CopyFileExW
CopyFileW
OpenJobObjectW
GetProfileStringA
DisconnectNamedPipe
FreeLibraryAndExitThread
lstrcmpW
SetFilePointerEx
GetShortPathNameW
PostQueuedCompletionStatus
FileTimeToLocalFileTime
lstrcpyA
AreFileApisANSI
DeviceIoControl
InterlockedExchangeAdd
GetExitCodeProcess
HeapCompact
CreateFileMappingW
FindFirstFileA
QueryPerformanceFrequency
GetLocalTime
FindVolumeClose
GetFullPathNameA
AddAtomA
WaitForMultipleObjects
GetModuleHandleW
DeleteTimerQueueEx
EnumSystemLocalesA
GetQueuedCompletionStatus

ole32

CoGetCallContext
CreateItemMoniker
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
OleSaveToStream
OleCreateFromFile
CoFreeUnusedLibrariesEx
StgIsStorageFile
CreateGenericComposite
FreePropVariantArray
CoGetClassObject
CoGetMalloc
CoImpersonateClient
BindMoniker
OleInitialize
IIDFromString
OleSetMenuDescriptor
StgCreateDocfile
OleUninitialize
GetRunningObjectTable
OleDuplicateData
CoGetInterfaceAndReleaseStream
OleRegGetMiscStatus
OleCreateLinkToFile
CoGetMarshalSizeMax
StringFromIID
CoCreateInstanceEx
OleSetContainedObject
CoUninitialize
CoTaskMemAlloc
OleCreate
CoTaskMemFree

shlwapi

PathGetDriveNumberW
PathSetDlgItemPathW
PathUndecorateW
SHCreateShellPalette
PathUnquoteSpacesW
StrStrIA
PathStripPathW
StrCatW
SHAutoComplete
PathBuildRootW
StrTrimW
StrNCatW
StrCatBuffW
StrDupA
SHRegSetPathW
wnsprintfW
PathFindFileNameA
PathFindNextComponentW
PathRemoveBackslashW
SHDeleteKeyA
UrlUnescapeW
SHDeleteValueW
PathIsRootW
PathCommonPrefixW
UrlCombineW
PathIsURLW
SHSetValueA
PathMatchSpecW
PathIsUNCW

shell32

SHAppBarMessage
SHGetSpecialFolderPathW
SHGetSettings
SHGetMalloc
SHChangeNotify
SHGetSpecialFolderLocation
DragQueryFileW
ExtractIconExA
SHBrowseForFolderW
ShellAboutW
ShellExecuteExW
SHGetFolderPathA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc9cf8bb0b94257d7b26e8a669566cf7

Headers

File Characteristics

Imports

kernel32

ole32

shlwapi

shell32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 3KB