ee83669b2f7225820ed87472e571edea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
ee83669b2f7225820ed87472e571edea_JaffaCakes118
Size 563KB
Sample240411-2n3yasff77
SHA256 a5549bc1dbc21c4faa9b840cc90ad55ca534fe0bfc1bacaa64410db330766246
MD5 ee83669b2f7225820ed87472e571edea
SHA1 28c8dc6d466c7c99b111e8e89e85a8502ad3a8f6
SHA512 32139e32ae16b651b79252c960aeff27a6fe8492d47c21cff2efc59a3659fb66661a6b1c2ad864def9e0d919f10f2b430d020e4809e5e407fdd0691abbe82310
SSDEEP 6144:AZke9o+Sfm+NDFpM5Bk0c4anqBAZ15ec6FAiJ5o3:APbSfbN/M5BkDTZ15B6H5o3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee83669b2f7225820ed87472e571edea_JaffaCakes118

File Explorer

ee83669b2f7225820ed87472e571edea_JaffaCakes118

.dll 563KB

ee83669b2f7225820ed87472e571edea_JaffaCakes118

IMPHASH 09b8fcfe0d6c56fab8203e197d8843d6
SHA256 a5549bc1dbc21c4faa9b840cc90ad55ca534fe0bfc1bacaa64410db330766246
MD5 ee83669b2f7225820ed87472e571edea
SHA1 28c8dc6d466c7c99b111e8e89e85a8502ad3a8f6
SHA512 32139e32ae16b651b79252c960aeff27a6fe8492d47c21cff2efc59a3659fb66661a6b1c2ad864def9e0d919f10f2b430d020e4809e5e407fdd0691abbe82310
SSDEEP 6144:AZke9o+Sfm+NDFpM5Bk0c4anqBAZ15ec6FAiJ5o3:APbSfbN/M5BkDTZ15B6H5o3
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

221821

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalLock GlobalAlloc SetLastError FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW LoadLibraryA GlobalFree GlobalHandle LockResource FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA LCMapStringA GetLocaleInfoA GlobalUnlock GetConsoleCP SetFilePointer InitializeCriticalSectionAndSpinCount LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapSize GetModuleFileNameA GetStdHandle WriteFile ExitProcess TlsFree TlsSetValue TlsAlloc TlsGetValue HeapReAlloc HeapDestroy GetModuleFileNameW MulDiv lstrcmpW GetCurrentProcess FlushInstructionCache lstrcmpiW GetModuleHandleW GetProcAddress GetLastError InterlockedDecrement lstrlenW InterlockedIncrement GetCurrentThreadId Sleep DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException GetConsoleMode HeapCreate CreateThread ExitThread GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RtlUnwind VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange OpenMutexW CreateMutexW WaitForSingleObject ReleaseMutex CloseHandle LoadLibraryW WideCharToMultiByte

user32

SetFocus UnregisterClassA SetWindowLongW GetWindowLongW UnregisterClassW CharNextW DefWindowProcW DestroyWindow GetSysColor MoveWindow SetWindowPos MapWindowPoints MapDialogRect SetWindowContextHelpId IsWindowVisible GetWindowRect GetTopWindow CreateDialogIndirectParamW ShowWindow PeekMessageW TranslateMessage DispatchMessageW RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW GetClientRect CreateWindowExW RegisterClassExW LoadCursorW GetClassInfoExW IsWindow SendMessageW CreateAcceleratorTableW GetFocus GetWindow DestroyAcceleratorTable GetDesktopWindow BeginPaint EndPaint CallWindowProcW FillRect ReleaseCapture GetClassNameW GetDlgItem GetParent IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ScreenToClient ClientToScreen

gdi32

GetObjectW CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap DeleteDC SelectObject DeleteObject GetStockObject

advapi32

RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW

ole32

OleUninitialize CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoTaskMemFree StringFromGUID2 OleLockRunning CoGetClassObject CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal OleInitialize

oleaut32

DispCallFunc LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VariantClear VariantInit VarUI4FromStr SysAllocString SysAllocStringLen SysFreeString SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

ee83669b2f7225820ed87472e571edea_JaffaCakes118

kernel32

user32

gdi32

advapi32

ole32

oleaut32

generic