26becb22114a4fd11296040b88daef83_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26becb22114a4fd11296040b88daef83_JaffaCakes118
Size

193KB
MD5

26becb22114a4fd11296040b88daef83
SHA1

6ca455ed1991129bf304c7571b7f26ad1552b273
SHA256

67a09d6f44ecb00ea85f0cb00bfbafe6ac06fc6bedb030a46f1dda5bdb42074a
SHA512

f3dd6f076840c002f26be3a3d105f66d84ab5f30300f02f7adcdd2ea150ea1a7e687189603376563a202c96f057a96bfb561813a1b597e3bd9ca97d24761ad72
SSDEEP

3072:nHg9//nMrk4v1qocPZf53wIxTQg7/vz5TEF+a1zbDZi0uENafCN:Hg9nMYgqo0JwItT/vz5c3Nnaf4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26becb22114a4fd11296040b88daef83_JaffaCakes118

Files

26becb22114a4fd11296040b88daef83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f122758c24375991082fc1554ec17124

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

comctl32

ImageList_Remove
ImageList_Read

gdi32

GetCurrentPositionEx
SelectPalette
GetBkColor
CreateBitmap
CreatePenIndirect

shlwapi

SHEnumValueA
SHGetValueA

kernel32

GlobalDeleteAtom
GetSystemDefaultLangID
VirtualAlloc
HeapFree
GetFileAttributesA
GetVersionExA
SizeofResource
Sleep
LocalReAlloc
ReadFile
VirtualFree
GetStdHandle
GetStringTypeA
SetThreadLocale
GlobalAlloc
GetFileType
GetTickCount
GetModuleHandleA
GetDateFormatA
MulDiv
VirtualQuery
GetOEMCP
GetACP
VirtualAllocEx
SetLastError

oleaut32

SafeArrayPtrOfIndex
SysFreeString
VariantChangeType

user32

CallNextHookEx
TranslateMessage
IsDialogMessageW
GetScrollInfo
SetFocus
SetCapture
EnumWindows
LoadIconA
UnregisterClassA
GetMessagePos
GetSystemMetrics
CharNextW
DefMDIChildProcA
FillRect
RegisterClassA
GetMenu
MoveWindow
InvalidateRect
GetWindowThreadProcessId
ChildWindowFromPoint
IsChild
GetScrollRange
MapVirtualKeyA
CreateWindowExA
SetClipboardData
GetTopWindow
PeekMessageA
WaitMessage
EndPaint
MessageBoxA
MsgWaitForMultipleObjects
RegisterWindowMessageA
RemoveMenu
SetWindowsHookExA
SetParent
GetMenuItemInfoA
PtInRect
CharUpperA
GetCursorPos
GetMenuStringA
CharLowerA
IsIconic
wsprintfA
SetScrollInfo
InsertMenuA
RemovePropA
CharUpperBuffA
InflateRect
OemToCharA
TranslateMDISysAccel
CreateIcon
GetDCEx
LoadKeyboardLayoutA
GetForegroundWindow
IsCharLowerA
GetKeyNameTextA
GetSysColor
GetKeyboardLayout
GetClassInfoA
FrameRect
LoadBitmapA
DrawTextA
GetClassLongA
GetKeyboardType
GetSysColorBrush
ActivateKeyboardLayout
SystemParametersInfoA
GetWindowDC
IsWindowUnicode
ShowWindow
IntersectRect
ClientToScreen
GetWindowLongW
DestroyMenu
DispatchMessageA
DrawIconEx
ShowScrollBar
FindWindowA
DeleteMenu
GetClientRect
GetMenuItemID
SetMenuItemInfoA
IsZoomed
IsDialogMessageA
MapWindowPoints
MessageBeep
DefWindowProcA
GetDesktopWindow
GetDC
GetMenuState
IsWindow
IsWindowEnabled
CloseClipboard
LoadStringA
DestroyIcon
SetClassLongA
PostMessageA
CreatePopupMenu
CheckMenuItem
SendMessageW
GetWindowTextA
DispatchMessageW
SetWindowPlacement
SetActiveWindow
IsRectEmpty
UpdateWindow
SetScrollPos
GetKeyState
SetForegroundWindow
SetTimer
PeekMessageW
OffsetRect
GetClipboardData
SendMessageA
EnumThreadWindows
IsWindowVisible
SetWindowTextA
GetActiveWindow
OpenClipboard
DestroyCursor
EnableMenuItem
DrawMenuBar
GetKeyboardLayoutList
GetKeyboardLayoutNameA
SetCursor
RegisterClipboardFormatA
GetParent
DrawEdge
PostQuitMessage
ScrollWindow
GetLastActivePopup
EnumChildWindows
SetMenu
DrawIcon
EmptyClipboard
CharToOemA
SetRect
EnableScrollBar
CreateMenu
GetKeyboardState
GetWindowTextLengthA
DrawFrameControl
DrawAnimatedRects
GetScrollPos
GetSystemMenu
SetPropA
GetSubMenu
ReleaseDC
SetScrollRange
ShowOwnedPopups
CharNextA
GetWindowLongA
BeginPaint
EqualRect
UnhookWindowsHookEx
GetMenuItemCount
ScreenToClient
SetWindowPos
AdjustWindowRectEx
GetDlgItem

Exports

Exports

_dJPqlrD
_bAQ9brKc
__F_8lNUJA
VHDcuaT77

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f122758c24375991082fc1554ec17124

Headers

File Characteristics

Imports

comctl32

gdi32

shlwapi

kernel32

oleaut32

user32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 155KB - Virtual size: 156KB

.bss Size: 1KB - Virtual size: 100KB

.tls Size: 1KB - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 5KB - Virtual size: 8KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 155KB - Virtual size: 156KB

.bss
Size: 1KB - Virtual size: 100KB

.tls
Size: 1KB - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 5KB - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 20KB - Virtual size: 20KB