ebb247993d0832ca75ca0dd10fb527ee_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ebb247993d0832ca75ca0dd10fb527ee_JaffaCakes118
Size

51KB
MD5

ebb247993d0832ca75ca0dd10fb527ee
SHA1

616442a4a5b90b83355c3a4eae05fd397e4d7e1e
SHA256

2c80e73211b699c660a390cf32235484c7aeb34f2c2c0a174958b3bc8fe425f1
SHA512

45581332d4a34f4fed4d3739c5f9441a6caac8692fde45d40717b46e483c518b0db83e5df4628c0ead2b93fdc575f31473918801569ff566a2bcbce28ce8f4e9
SSDEEP

768:41cLhhfsE+1LsBG6AgNCMC0rWIAbpAtkUD4Ceh2VTqM:42LiLKvjNCMWA62R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb247993d0832ca75ca0dd10fb527ee_JaffaCakes118

Files

ebb247993d0832ca75ca0dd10fb527ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

26af74e73a5684352073e779a4eb0c18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\uejxdtlinki\NRgodjotUP\ugaxEgzR.pdb

Imports

comctl32

ImageList_LoadImageW
ImageList_GetIcon
CreateStatusWindowW
ImageList_AddMasked
ImageList_Write
ImageList_GetIconSize

kernel32

FindResourceW
CallNamedPipeW
FileTimeToLocalFileTime
OpenFileMappingA
GlobalAlloc
GetCommandLineW
GetLongPathNameW
CreateNamedPipeA
SetLocalTime
FreeResource
SetUnhandledExceptionFilter
LocalLock
MoveFileA
GetUserDefaultLangID
GetCommandLineA
DisconnectNamedPipe
GetShortPathNameA
Sleep
GetBinaryTypeA
EnterCriticalSection
GetSystemWindowsDirectoryA
GetSystemTimeAsFileTime
LoadLibraryExA
SetFileTime
EscapeCommFunction
SetThreadPriority
TlsGetValue
GetLocaleInfoW
GlobalMemoryStatus
lstrcatA
OpenFileMappingW
ExitThread
CreateDirectoryA
SleepEx
GlobalMemoryStatusEx
GetNumberFormatA
EnumResourceNamesW
GlobalGetAtomNameA
SetLastError
TerminateThread
IsValidLanguageGroup
CompareStringW
LocalSize
GlobalFlags
IsBadCodePtr
SetErrorMode
CompareStringA
UnlockFile
LoadLibraryA
lstrlenA
IsBadReadPtr
FindNextChangeNotification
EnumResourceNamesA
LoadResource
WaitForMultipleObjects

shlwapi

StrToIntW

msvcrt

clearerr
iswspace
strcspn
iswdigit
fprintf
strcpy
isalnum
sprintf
swscanf
putchar
_controlfp
iswxdigit
atol
strerror
system
__set_app_type
__p__fmode
malloc
wcslen
wcsrchr
wcstod
strtol
__p__commode
_amsg_exit
iswctype
strtok
fread
strcoll
fgets
wcsncpy
_initterm
wcstok
_ismbblead
printf
setlocale
_XcptFilter
qsort
isalpha
tolower
gets
_exit
_cexit
__setusermatherr
__getmainargs
fclose
wcstombs
wcstoul

user32

IsWindowUnicode
OpenIcon
GetWindowDC
ReplyMessage
InSendMessage
DrawFocusRect
GetDlgCtrlID
FindWindowW
ShowWindow
SetMenu
RegisterHotKey
CharLowerW
GetMenuStringW
GetMenuItemCount
GetMenuItemRect
CreateCaret
BeginDeferWindowPos
GetClassInfoExW
RegisterWindowMessageA
LockWindowUpdate
IsWindowEnabled
LoadAcceleratorsA
CharToOemBuffA
FindWindowExA
SetParent
TileWindows
DispatchMessageA
OffsetRect
AttachThreadInput
GetClassInfoExA
MonitorFromPoint
RedrawWindow
CloseDesktop
ShowCursor
SetTimer
TranslateAcceleratorA
GetWindowTextA
GetSystemMetrics
SetRect
CharLowerA
AppendMenuA
CheckRadioButton
LoadImageA
FrameRect
SetSysColors
CreateDialogIndirectParamW
MessageBoxW
DefDlgProcW
CharPrevW
SwitchToThisWindow
CreatePopupMenu
SendDlgItemMessageW
ClientToScreen
InsertMenuW
AdjustWindowRect
EnableScrollBar
KillTimer
CreateIconFromResource
SetWindowLongW
GetKeyboardLayoutNameW
DrawFrameControl
EqualRect
GetScrollRange
CreateIconIndirect
GetMonitorInfoW
CreateWindowExA
GetMessageW
ExitWindowsEx
DestroyWindow
WaitMessage
DestroyCursor
VkKeyScanW
LoadStringA
SendMessageW
GetMessageTime
LookupIconIdFromDirectory
GetNextDlgGroupItem
GetCaretPos
GetMessageExtraInfo
DrawMenuBar
ReleaseDC
InSendMessageEx
GetCursorPos
InflateRect
GetAsyncKeyState
SendMessageA
ChildWindowFromPoint
RegisterClassExW
UpdateWindow
GetMenuItemInfoW
LoadCursorW
CharToOemA
ShowWindowAsync
IsChild
GetScrollPos
IsIconic
GetWindowTextW
GetClassNameW
DrawStateA
GetMenuStringA
ActivateKeyboardLayout
wvsprintfA
CreateCursor
SetDlgItemTextA
GetUpdateRect
GetKeyboardType
CopyAcceleratorTableW
wsprintfA
EnumThreadWindows
DeleteMenu
SendMessageTimeoutW
ChangeMenuW
SetActiveWindow
wsprintfW
IsCharAlphaW
ShowOwnedPopups
WaitForInputIdle

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26af74e73a5684352073e779a4eb0c18

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

shlwapi

msvcrt

user32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 444B

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 444B

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 1KB - Virtual size: 1KB