8ebf1dbc84337d4c901f9c5e63f85e9e_JaffaCakes118

General

Target

8ebf1dbc84337d4c901f9c5e63f85e9e_JaffaCakes118
Size

84KB
MD5

8ebf1dbc84337d4c901f9c5e63f85e9e
SHA1

1c7d5a4e217e3c16353fcd7651686c1eff9c0490
SHA256

cc9bc0cbe52487fbdb1df2256d382422b78514a8baf4366752274273d301b121
SHA512

c0b6dbd30990fdb5f1699e580661a365be5f51377fa64fd30517efdcb946a421d54a359cd177dde8c75fa0ba451195ec1182104965a960c1647dd95fb3a8ba6d
SSDEEP

1536:paUumqa3M3L49TB2UooFLOY4OVtQSI1CSi6SFjBb/Db91P3:YU7qhc9TcU9ObOVtQStNhBx1P3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ebf1dbc84337d4c901f9c5e63f85e9e_JaffaCakes118

Files

8ebf1dbc84337d4c901f9c5e63f85e9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f2a35d07197a1c8575ed9d7db4506e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegEnumValueA
RegOpenKeyW
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegEnumValueW
RegQueryValueW
RegDeleteValueA
RegQueryValueA
RegEnumKeyExW
RegEnumKeyW
RegLoadKeyA
RegCreateKeyExW
RegReplaceKeyA
RegCreateKeyW

comctl32

InitCommonControls
ImageList_GetImageInfo
ImageList_AddIcon
ImageList_BeginDrag
ImageList_LoadImageA
ImageList_DragMove
ImageList_LoadImage
ImageList_AddMasked
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_Create
ImageList_Merge
ImageList_Draw

user32

GetFocus
BlockInput
GetWindowTextLengthA
DialogBoxParamW
CreateIcon
InsertMenuA
GetCursor
GetDC
LoadCursorA
CopyIcon
CloseWindow
AlignRects
IsMenu
GetWindowTextA
GetDlgItem
CalcMenuBar
DrawTextA
LoadMenuA

kernel32

CreateThread
WriteFile
CreateDirectoryA
FindFirstFileA
OpenFileMappingA
ReadConsoleA
CopyFileA
ExitThread
GetCommandLineA
SetLastError
DeleteAtom
GlobalFree
GetLastError
OpenFile
CopyFileW
GetStdHandle
FindAtomA
GetCPInfo
CopyFileExW
ReadFile

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f2a35d07197a1c8575ed9d7db4506e8

Headers

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 64KB - Virtual size: 159KB

.reloc Size: - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 64KB - Virtual size: 159KB

.reloc
Size: - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB