eb54d97463126d2c847af3d180f96770_JaffaCakes118

General

Target

eb54d97463126d2c847af3d180f96770_JaffaCakes118
Size

74KB
MD5

eb54d97463126d2c847af3d180f96770
SHA1

6531170ac1db73a21e497300fb24d839f8298810
SHA256

dc99148df901bed29afa35a1f2af1d9817cf5761f20a1a16a4c6d12343051484
SHA512

4c511405162ef4bfdb899bc1755f5aa81a3be5651ab19394e15b3f388dc1c409a3ddaa20bfa85cb681305a9def5ffe9450700ee00bbe7169d2b014f4fee07c0a
SSDEEP

1536:iE+GRvcpWAzbDzRsp8MSPsLt/m9tlOgt/FL8UmmkDPqgBvmB8Q:5+GGHDzh+/mv8UObqhh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb54d97463126d2c847af3d180f96770_JaffaCakes118

Files

eb54d97463126d2c847af3d180f96770_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eb57b46a49b251824bed0d697d0e2bfa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwSecureConnectPort
LdrFindResourceDirectory_U
RtlAdjustPrivilege
NtQueueApcThread
ZwReplyWaitReplyPort
RtlUpcaseUnicodeToCustomCPN
RtlAcquireResourceShared
RtlAddAccessAllowedAceEx
NtCurrentTeb
RtlEmptyAtomTable
RtlGetControlSecurityDescriptor
RtlWalkFrameChain
_atoi64
PfxFindPrefix
RtlFillMemory
RtlCreateTimer
RtlAllocateHeap
NtPrivilegeCheck
memmove
LdrQueryProcessModuleInformation

kernel32

VirtualFree
GetCurrentThreadId
GetModuleHandleW
VirtualLock
GetCurrentProcessId
VirtualAlloc
GetTickCount
_llseek
MulDiv
lstrlenW
CreateFiber
GlobalAddAtomW
SetConsoleMaximumWindowSize
CreateProcessW
GetConsoleAliasExesA
FindResourceExW
BeginUpdateResourceA
SetThreadIdealProcessor
WriteConsoleOutputCharacterW
GetCommProperties
GetFileAttributesA
EnumSystemCodePagesW
VirtualProtect

user32

GetClassNameW
IsDlgButtonChecked
RegisterWindowMessageW
MessageBoxW
DefWindowProcW
EnableMenuItem
AppendMenuW
ScreenToClient
PostMessageW
GetWindow
CreateWindowExW
DrawEdge
GetDoubleClickTime
SetCursor
EndPaint
CheckRadioButton
SendMessageTimeoutW
GetFocus

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb57b46a49b251824bed0d697d0e2bfa

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

user32

Sections

.text Size: 71KB - Virtual size: 70KB

.data Size: 1KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 960B

.text
Size: 71KB - Virtual size: 70KB

.data
Size: 1KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 960B