eaebc2ccc98d91b722f5dd5bbb6f3711_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

eaebc2ccc98d91b722f5dd5bbb6f3711_JaffaCakes118
Size

380KB
MD5

eaebc2ccc98d91b722f5dd5bbb6f3711
SHA1

83c037e8483977ea0112ebc2316f253232947c35
SHA256

95dc3cc659a45ee19b6aa2d5061ecd0e341e96bd3228087118960bd91e10e59a
SHA512

3e9f5a54c0400ac82966ea675d280450fdad8a6e21aac20c8ac7f921924d65cb6c88ccf47cf254223e54f4901587f097567e329af5c1a70a2d0eb7bb48907546
SSDEEP

3072:VMKlWdec3u+4dlGNTal165H//bgK+9F+AJaTGi3FENeECXCj2B:VCWdlGNGXGfTs9kAJS3umX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaebc2ccc98d91b722f5dd5bbb6f3711_JaffaCakes118

Files

eaebc2ccc98d91b722f5dd5bbb6f3711_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8695a3457ae8be101eb0de413849b39b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5260
ord2446
ord6614
ord5277
ord2982
ord3147
ord3259
ord4465
ord6691
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4432
ord6478
ord825
ord6514
ord6800
ord4284
ord2233
ord2379
ord2864
ord800
ord539
ord537
ord6814
ord2575
ord6055
ord4396
ord5241
ord5290
ord3749
ord1727
ord5261
ord2124
ord3136
ord3402
ord4424
ord3574
ord809
ord609
ord556
ord567
ord4275
ord2754
ord5875
ord3874
ord2859
ord540
ord3663
ord3571
ord3626
ord640
ord2414
ord2405
ord1641
ord1640
ord323
ord6197
ord1146
ord6358
ord1088
ord2122
ord2614
ord2818
ord535
ord5785
ord3692
ord3573
ord858
ord2450
ord4299
ord6215
ord6699
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord641
ord324
ord6453
ord2302
ord4234
ord3619
ord1768
ord4347
ord3092
ord924
ord4710
ord1200
ord1949
ord818
ord3693
ord613
ord1168
ord6880
ord6605
ord5788
ord5787
ord1725
ord860
ord1601
ord1871
ord4220
ord2584
ord3654
ord2863
ord2438
ord1644
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord656
ord2621
ord1134
ord5572
ord2915
ord2642
ord6805
ord3610
ord6380
ord755
ord470
ord6172
ord6710
ord6378
ord5981
ord6270
ord1175
ord3097
ord5953
ord5710
ord4129
ord5683
ord6877
ord2527
ord482
ord3499
ord3177
ord2515
ord355
ord2645
ord3721
ord795
ord3089
ord3797
ord5789
ord2860
ord2452
ord941
ord4476
ord4340
ord5076
ord6817
ord4892
ord4370
ord4899
ord4588
ord4589
ord6835
ord6808
ord6856
ord6845
ord6812
ord6815
ord6816
ord6858
ord6846
ord6839
ord6847
ord6867
ord6859
ord6832
ord6855
ord6823
ord6857
ord6807
ord6591
ord5065
ord3748
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5281
ord4353
ord6374
ord5163
ord2385
ord5240
ord4407
ord1776
ord4078
ord6054
ord4108
ord4960
ord4963
ord4524
ord4529
ord4526
ord4543
ord4545
ord4531
ord4889
ord289
ord4720
ord6650
ord6597
ord6199
ord823
ord1576

msvcrt

_stricmp
__CxxFrameHandler
sprintf
_strupr
_setmbcp
_splitpath
atoi
free
wcscmp
malloc
_mbscmp
_ftol
atol
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

kernel32

GetCurrentThreadId
GlobalAlloc
GlobalLock
GetVersionExA
GetProcAddress
GetPrivateProfileStringA
WritePrivateProfileStringA
Sleep
GetModuleHandleA
GetModuleFileNameA
lstrcmpiA
CreateMutexA
GetLastError
ReleaseMutex
GetVersion
CreateFileA
WriteFile
CloseHandle
GetPrivateProfileIntA
GetTickCount
FindFirstFileA
FindClose
GetStartupInfoA

user32

BringWindowToTop
GetLastActivePopup
FindWindowA
SetWindowPos
TranslateAcceleratorA
SetCursor
PtInRect
LoadImageA
IsIconic
RedrawWindow
SetWindowLongA
AppendMenuA
GetSystemMenu
ModifyMenuA
EnableMenuItem
EmptyClipboard
ChildWindowFromPointEx
SetWindowTextA
PostQuitMessage
LoadAcceleratorsA
RegisterWindowMessageA
SetFocus
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
GetWindowLongA
GetSysColor
EnableWindow
LoadMenuA
SetClipboardData
CloseClipboard
GetDesktopWindow
ValidateRect
ScreenToClient
LoadCursorA
DrawIcon
KillTimer
SetTimer
GetSystemMetrics
GetWindowRect
GetClientRect
FillRect
ReleaseDC
PeekMessageA
DispatchMessageA
TranslateMessage
GetNextDlgGroupItem
PostMessageA
ReleaseCapture
InvalidateRect
ClientToScreen
LoadBitmapA
SetWindowRgn
GetDC
GetCapture
GetCursorPos
GetSubMenu
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
WindowFromPoint
SendMessageA
DrawEdge
IsWindow
LoadIconA
OffsetRect
GetParent
OpenClipboard
MessageBoxA
DrawFocusRect

gdi32

StretchBlt
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
SelectClipRgn
CombineRgn
CreateRectRgn
GetPixel
CreateDIBSection
CreateDCA
GetBitmapBits
DeleteDC
CreateFontA
Rectangle
CreatePen
GetDIBits
GetStockObject
RestoreDC
EndDoc
EndPage
StretchDIBits
StartPage
StartDocA
GetDeviceCaps
CreateSolidBrush
DeleteObject
GetObjectA

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA
Shell_NotifyIconA
SHGetSpecialFolderPathA

comctl32

_TrackMouseEvent

oleaut32

SysFreeString

shlwapi

PathCompactPathA

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipAlloc
GdipFree
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDisposeImage
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8695a3457ae8be101eb0de413849b39b

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

comdlg32

shell32

comctl32

oleaut32

shlwapi

gdiplus

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 280KB - Virtual size: 279KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 280KB - Virtual size: 279KB