26aca67e755b79679663436a4996ddbf_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

26aca67e755b79679663436a4996ddbf_JaffaCakes118
Size

678KB
MD5

26aca67e755b79679663436a4996ddbf
SHA1

92aaef7ce303ad5aeeb09c0acd38be75affc6f2d
SHA256

faaa0098ad3de31c95506576653962bf783bdf347b6d22255d707561e30c5350
SHA512

bd98a1712a883632374b028eaf0a615709319571effdf569249f483c1fe0ff86f14370026f18ea9e42fbf2aa772a27da8ba318d7919dff2dd282be300d401ebc
SSDEEP

12288:uqluOGXcc5O95gTHGJGxc/Mi1qF6gnc4DYTP3EEyB7u/adsNDQmTHzRXy2EGkGux:uOu1CwamU+svEEs5sNDpTRXPhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26aca67e755b79679663436a4996ddbf_JaffaCakes118

Files

26aca67e755b79679663436a4996ddbf_JaffaCakes118
.exe windows:6 windows x86 arch:x86

2f5581749403d6c4d8f69e407a5b55c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Izidu\Desktop\2019\vshadow-master\vshadow-master\Release\vshadow.pdb

Imports

vssapi

VssFreeSnapshotPropertiesInternal
ShouldBlockRevertInternal
CreateVssBackupComponentsInternal

resutils

ClusterGetVolumePathName
ClusterPrepareSharedVolumeForBackup
ClusterGetVolumeNameForVolumeMountPoint
ClusterIsPathOnSharedVolume

kernel32

InitializeCriticalSectionAndSpinCount
WriteConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
GetLastError
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
WriteFile
CloseHandle
CreateFileW
WideCharToMultiByte
GetVolumePathNameW
QueryDosDeviceW
GetFileAttributesW
FindFirstFileW
FindClose
FindNextFileW
GetThreadLocale
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
FreeConsole
VirtualAlloc
HeapSetInformation
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
ReadFile
GetFileSize
GetCommandLineW
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
FormatMessageW
LocalFree
ExpandEnvironmentStringsW
IsValidCodePage
FindFirstFileExW
HeapSize
HeapReAlloc
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileSizeEx
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
MultiByteToWideChar
GetStringTypeW
EncodePointer
EnterCriticalSection
LeaveCriticalSection
SetLastError
SetEndOfFile
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetCommandLineA
HeapFree
HeapAlloc
GetFileType

ole32

CoInitializeSecurity
CoTaskMemFree
CLSIDFromString
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString

shlwapi

PathFileExistsW

Exports

Exports

DAAGGGRHNUI

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f5581749403d6c4d8f69e407a5b55c8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vssapi

resutils

kernel32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 321KB - Virtual size: 321KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 214KB - Virtual size: 214KB

.text
Size: 321KB - Virtual size: 321KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 214KB - Virtual size: 214KB