eb2c73d42d251424f27bde2d82f60ef1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eb2c73d42d251424f27bde2d82f60ef1_JaffaCakes118
Size

276KB
MD5

eb2c73d42d251424f27bde2d82f60ef1
SHA1

41aaf0c6b1cd72fab21346d8821a06eb83175808
SHA256

5ff0e19cca6c42a7f1b5d47ba2172ec43b32a32e92e0687b43bca0260677cfe5
SHA512

c24db577a7bfb8691f5b65e833cebc99fad1f13383f94ab9ff0a64b7f85e2b2947711082e3509b75ff58237530290531a8c79096de17e46a6d4722be024ffa41
SSDEEP

6144:QxEWado6FopCNzA1wGz53uq7TPidip46eWzbDwG9a69jEbXRoK7Po:QxEWaddgCNzACG13jT4NiIUa5DRoKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb2c73d42d251424f27bde2d82f60ef1_JaffaCakes118

Files

eb2c73d42d251424f27bde2d82f60ef1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70f18afaf99017cf03fe791b5dc6b23f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExW
DeleteFileW
GetLogicalDrives
GetDriveTypeW
CreateEventW
GetUserDefaultLangID
GetProcAddress
MultiByteToWideChar
lstrcpyW
Sleep
LoadLibraryW
QueryDosDeviceW
TerminateThread
SetEndOfFile
GlobalAddAtomW
ExitProcess
FreeLibrary
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
CreateThread
ResetEvent
SetCurrentDirectoryW
CreateFileW
FindFirstChangeNotificationW
LockResource
FindFirstFileW
MoveFileW
ReadProcessMemory
InterlockedIncrement
GetModuleHandleW
CreateProcessW
GlobalLock
FileTimeToSystemTime
GetFileAttributesW
MulDiv
GetCurrentProcessId
SetWaitableTimer
DuplicateHandle
GlobalDeleteAtom

user32

UpdateWindow
SetDlgItemTextW
GetWindowRect
OffsetRect
GetDlgItem
GetWindowTextW
SetCapture
IsWindow
SystemParametersInfoW
DispatchMessageW
SetWindowPos
PostMessageW
ReleaseCapture
MessageBoxW
RedrawWindow
RegisterWindowMessageW
TrackPopupMenu
GetSystemMetrics
DestroyMenu
GetKeyState
VkKeyScanW
LoadIconW
SetForegroundWindow
SetCursorPos
GetSysColor
WindowFromPoint
wsprintfW
FillRect
SetLayeredWindowAttributes

gdi32

CreateICW
CreateCompatibleBitmap
SetDIBits
SetBkMode
CreateDCW
CreateSolidBrush
CreateRoundRectRgn
DPtoLP
SetTextColor
CreateCompatibleDC
GetObjectW
CreateBitmap

advapi32

RegQueryValueExW
RegDeleteValueW
LookupAccountSidW
GetUserNameW
RegOpenKeyExW
RegCreateKeyExW

shell32

SHChangeNotify

oleaut32

SysFreeString

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70f18afaf99017cf03fe791b5dc6b23f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

Sections

.text Size: 236KB - Virtual size: 235KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 236KB - Virtual size: 235KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 8KB - Virtual size: 6KB