eb68291bedba76f97c2c70b8b7a94761_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eb68291bedba76f97c2c70b8b7a94761_JaffaCakes118
Size

275KB
MD5

eb68291bedba76f97c2c70b8b7a94761
SHA1

59eebf1f8781bc8399b89a3a56206ebbbb7b7081
SHA256

4ee7b55154d36f23ae17d3841e7cce71ac78979a727e48e1b2a4e2b186ba5f35
SHA512

b35fff2b5314299c70cf901d2fcdb9d72facc45fb4a6873901da665d9821b360ba5155b811d0abcd4ac4ee3ceba678578aa821349118fda7cb84a48148df020d
SSDEEP

6144:1XubZutHLtgX5CYoN2FlxlgObTDwS/T9tETVKb+S:1XubZeLt0oWlvgObwS/45K6S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb68291bedba76f97c2c70b8b7a94761_JaffaCakes118

Files

eb68291bedba76f97c2c70b8b7a94761_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d09f728611029b438616097a03d58bf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

GetDeviceCaps
CreateCompatibleBitmap
CreateCompatibleDC

atl

ord43
ord44
ord45
ord32
ord20
ord30
ord17
ord16

msvcrt

_itow
__set_app_type
_exit
_vsnwprintf
malloc
_wfopen
fclose
exit
_CIpow
_purecall
_onexit
__wgetmainargs
wcsstr
_adjust_fdiv
_CxxThrowException
_cexit
??2@YAPAXI@Z
wcscmp
??1type_info@@UAE@XZ
??3@YAXPAX@Z
__setusermatherr
_XcptFilter

hid

HidP_GetUsageValue
HidD_GetPreparsedData
HidD_GetHidGuid
HidP_GetSpecificValueCaps

user32

SendInput
DestroyIcon
GetThreadDesktop
EnumDisplayMonitors
GetDC
IntersectRect
OpenInputDesktop
UpdateLayeredWindow
GetMessageW
SetWindowLongW
LoadImageW
GetClientRect
CreateWindowExW
InflateRect
FillRect
SetCursorPos
DestroyWindow
MonitorFromWindow
GetPropW
MonitorFromPoint
GetAncestor
CallNextHookEx
CloseDesktop
SystemParametersInfoW
ShowWindow
GetDesktopWindow
WindowFromPoint
GetSystemMetrics

advapi32

RegEnumKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorOwner
GetLengthSid
CopySid
OpenThreadToken
RegOpenKeyW
RegQueryValueExA
SetSecurityDescriptorGroup
RegDeleteKeyW
RegCreateKeyW
OpenProcessToken
RegSetValueExW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW

kernel32

MulDiv
VirtualAllocEx
GetTickCount
InitializeCriticalSectionAndSpinCount
SetThreadPriority
CancelWaitableTimer
GetTickCount
lstrcpyW
CompareStringW
LoadLibraryW
InterlockedDecrement
CloseHandle
GetCommandLineW
HeapAlloc
SetEvent
GetSystemDirectoryW
GlobalDeleteAtom
CreateMutexW
InitializeCriticalSection
HeapFree
SetPriorityClass
SetPriorityClass
CloseHandle
GlobalAddAtomW
OpenProcess
VirtualFree
QueryPerformanceCounter
DuplicateHandle
GetProcessShutdownParameters

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d09f728611029b438616097a03d58bf7

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

atl

msvcrt

hid

user32

advapi32

setupapi

kernel32

ole32

Sections

.text Size: 169KB - Virtual size: 169KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 28KB - Virtual size: 548KB

.text
Size: 169KB - Virtual size: 169KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 28KB - Virtual size: 548KB