26824f84d7c4a856d02a8304b027af7a_JaffaCakes118

General

Target

26824f84d7c4a856d02a8304b027af7a_JaffaCakes118
Size

184KB
MD5

26824f84d7c4a856d02a8304b027af7a
SHA1

a511feed6daeb38293d9e8b62740459b17406381
SHA256

b57cef6e2f121d42e0b5ecc60de2d29b98a8290cd808f58636cd96af2bdec9a0
SHA512

2afe7982ff5cfd42ba0938a4ad6bc9c4fb6cdc1b981c48b3b66b1e04a98567a25f65a68d861c1887c7d6ba91a453d4529eaa9a508267c513105314bb3e9394fd
SSDEEP

3072:VEy251OtJb46DY8RGx8XOWhXO0uLTCTbJmEjFCViGQDmxYzuS9HineAwaI+:VEy2I46Dbk89hXPXzFka7inV1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26824f84d7c4a856d02a8304b027af7a_JaffaCakes118

Files

26824f84d7c4a856d02a8304b027af7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4d02987ba76af4c2034d54c86ee72ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
Sleep
EnumSystemLocalesA
GlobalAlloc
CreateFileA
SetUnhandledExceptionFilter
GetCommandLineA
GetThreadPriority
IsValidCodePage
HeapReAlloc
GetCurrentProcess
GetUserDefaultLCID
WideCharToMultiByte
HeapSize
SetCommConfig
UnhandledExceptionFilter
EnterCriticalSection
InterlockedDecrement
GetLocaleInfoW
GetCPInfo
GetVersionExA
LCMapStringA
SetEndOfFile
HeapAlloc
EnumResourceNamesA
GetProcAddress
WriteConsoleW
LCMapStringW
LeaveCriticalSection
SetStdHandle
InitializeCriticalSection
CloseHandle
GetCurrentThreadId
GetModuleFileNameW
MultiByteToWideChar
IsDebuggerPresent
DeleteCriticalSection
ExitProcess
WriteFile
GetConsoleOutputCP
WriteConsoleA
GetFullPathNameW
InterlockedIncrement
GetModuleHandleA
TerminateProcess
GetCurrentDirectoryW
RtlUnwind
ReadFile
RaiseException
GetProcessHeap
ExitProcess
IsValidLocale
HeapFree
GetFullPathNameA

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

user32

GetClassLongA
MessageBoxW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

rpcrt4

UuidCreate

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4d02987ba76af4c2034d54c86ee72ec

Headers

File Characteristics

Imports

kernel32

advapi32

user32

shell32

rpcrt4

Sections

.text Size: 162KB - Virtual size: 162KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 18KB

.crt Size: 512B - Virtual size: 216KB

.text
Size: 162KB - Virtual size: 162KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 18KB

.crt
Size: 512B - Virtual size: 216KB