26fe860f33f5215a4ed337168265769f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26fe860f33f5215a4ed337168265769f_JaffaCakes118
Size

112KB
MD5

26fe860f33f5215a4ed337168265769f
SHA1

f7d2fdf8b6dd3bcdda08e2f309be892b2745c556
SHA256

80f7bb8dba5aa9b399732f02c858124c8f953cdbcd5567e4dadc69c502cbea98
SHA512

389d871fd7d85391e273aa4434fad1f6aaea8320bdd8aa056736de2866c39e8125c4e35610db7429e0cbca3207af488ace6b0231290ce838cce473f5b33e27a7
SSDEEP

1536:BFgJssLXOoX0s41+nkSxac3/eCDapVNVXUhvwASCU/qcbBPd1ite6:ApLlXadAszbRdste6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26fe860f33f5215a4ed337168265769f_JaffaCakes118

Files

26fe860f33f5215a4ed337168265769f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d2f2d96a5cd908bbcbd8f88455887e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\MyVC\Assistant\release\YiqilaiLyrics.pdb

Imports

wininet

InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetCloseHandle

urlmon

URLDownloadToFileA

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetFileSize
lstrlenA
ReadFile
WinExec
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LocalFree
InterlockedDecrement
InterlockedIncrement
CreateDirectoryA
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetLastError
WaitForSingleObject
lstrcmpiA
Sleep
CreateThread
GetStringTypeA
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
IsDBCSLeadByte
SetEvent
DebugBreak
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
DeleteFileA
GetSystemDirectoryA
GetCommandLineA
CopyFileA
GetTempPathA
CreateMutexA
LCMapStringA
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateEventA
FreeEnvironmentStringsW
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
VirtualFree
GetOEMCP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetProcessHeap
GetStartupInfoA
TlsGetValue
HeapSize

user32

UnregisterClassA
MessageBoxA
PostThreadMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CharUpperA
CharNextA
LoadStringA

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

shell32

SHFileOperationA

ole32

CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoRevokeClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject

oleaut32

VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SysAllocStringLen
SysStringLen
LoadTypeLi
SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d2f2d96a5cd908bbcbd8f88455887e6

Headers

File Characteristics

PDB Paths

Imports

wininet

urlmon

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 3KB - Virtual size: 2KB