ecae6aad0c0f792eff99998da0297c3b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
ecae6aad0c0f792eff99998da0297c3b_JaffaCakes118
Size 299KB
Sample240411-e7qezscd82
SHA256 e0e45f041e2b1fb504ede037e77397e30812f810f1eaef492111db1bb245fcff
MD5 ecae6aad0c0f792eff99998da0297c3b
SHA1 3d6d70d7cd07a14353107cd25011f0f7d1dda3a8
SHA512 3e2c1451865a2d1c74fc82152c67e253159ede4f470fb1858fff25319e067de52549c5f4b34f6120995c3c57a316db33bdd1b5b42e3de2ad6a9cb686fbb2fb2e
SSDEEP 6144:nu/hy+60eweRZ4D66r2kGyu4Pn2hFoABoAWVlE:nu5hveweRI6sVGyud/oCJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecae6aad0c0f792eff99998da0297c3b_JaffaCakes118

File Explorer

ecae6aad0c0f792eff99998da0297c3b_JaffaCakes118

.dll 299KB

ecae6aad0c0f792eff99998da0297c3b_JaffaCakes118

IMPHASH b0e826d0d7bd34771e68ddd98397eb8e
SHA256 e0e45f041e2b1fb504ede037e77397e30812f810f1eaef492111db1bb245fcff
MD5 ecae6aad0c0f792eff99998da0297c3b
SHA1 3d6d70d7cd07a14353107cd25011f0f7d1dda3a8
SHA512 3e2c1451865a2d1c74fc82152c67e253159ede4f470fb1858fff25319e067de52549c5f4b34f6120995c3c57a316db33bdd1b5b42e3de2ad6a9cb686fbb2fb2e
SSDEEP 6144:nu/hy+60eweRZ4D66r2kGyu4Pn2hFoABoAWVlE:nu5hveweRI6sVGyud/oCJ
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

188543

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcAddress GetModuleHandleA lstrlenA lstrcmpiA DisableThreadLibraryCalls GetModuleFileNameA IsDBCSLeadByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA CopyFileA GetTempPathA GetEnvironmentVariableA InterlockedDecrement CreateThread LoadLibraryA GetVersion SystemTimeToFileTime GetSystemTime GetFileAttributesExA MoveFileExA DeleteFileA GetTempFileNameA GetProcessHeap SetEndOfFile InterlockedIncrement GetLastError DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException lstrlenW WideCharToMultiByte Sleep MultiByteToWideChar WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileA FlushFileBuffers SetStdHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeW GetStringTypeA GetCurrentProcessId GetTickCount QueryPerformanceCounter GetSystemTimeAsFileTime HeapAlloc HeapFree VirtualProtect VirtualAlloc GetModuleHandleW GetSystemInfo VirtualQuery TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind HeapReAlloc GetCurrentThreadId GetCommandLineA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError LCMapStringA LCMapStringW VirtualFree HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle HeapSize CloseHandle GetConsoleCP GetConsoleMode ReadFile SetFilePointer SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW

user32

CharNextA SetForegroundWindow GetWindowThreadProcessId CharUpperBuffA

advapi32

CheckTokenMembership RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA CreateWellKnownSid

ole32

CoTaskMemAlloc CoCreateInstance OleInitialize CoUninitialize CoTaskMemRealloc CoTaskMemFree CoInitialize

oleaut32

SysAllocString SysAllocStringLen VariantClear VariantInit VarBstrCmp SysStringByteLen SysAllocStringByteLen LoadTypeLi LoadRegTypeLi VarUI4FromStr SysStringLen SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

ecae6aad0c0f792eff99998da0297c3b_JaffaCakes118

kernel32

user32

advapi32

ole32

oleaut32

generic