ebef9aa4d2921f59599dfa50a08df838_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ebef9aa4d2921f59599dfa50a08df838_JaffaCakes118
Size

224KB
MD5

ebef9aa4d2921f59599dfa50a08df838
SHA1

6dc6b431624318612cbef77c63311837235c7ac3
SHA256

268e0a616a5514a83530b6ec390b128d4f910ec2599c40b078a7671e5d0f9b27
SHA512

fbf91708c1bc87dd3bb787ca1f44806b09bdc0580f4a687a3f56ac7df4a884fab3d9aab38d3f2cdad58a7ee186779ecf2d26456d66ab3a4a0460baab4a654312
SSDEEP

3072:XjVVbXd82bpFUkOWjWZcXJJyIBxD5S1cUs+6g5K+jAWUnoWuEcniakJUAb6OOfK:XjVs2t6kVXzgcU68KMXpn76b8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebef9aa4d2921f59599dfa50a08df838_JaffaCakes118

Files

ebef9aa4d2921f59599dfa50a08df838_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d6a0c86bb789c54a52eae9312277938

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
SetFilePointer
IsBadWritePtr
HeapReAlloc
VirtualAlloc
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualFree
HeapCreate
HeapDestroy
SetEndOfFile
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
ExitProcess
SetUnhandledExceptionFilter
DeleteCriticalSection
WriteFile
ReadFile
GetStringTypeA
GetStringTypeW
InterlockedExchange
SetStdHandle
FlushFileBuffers
CreateFileA
InitializeCriticalSection
GetTimeZoneInformation
VirtualProtect
CompareStringA
CompareStringW
lstrcatA
lstrlenA
lstrcmpA
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetPrivateProfileStringA
lstrcpynA
CloseHandle
LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
GetTickCount
WinExec
GetModuleHandleA
GetProcAddress
Sleep
CreateMutexA
GetLastError
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
FreeLibrary
GetFileType
SetLastError
TlsAlloc
GetACP
GetVersionExA
GetLocaleInfoA
RtlUnwind
WideCharToMultiByte
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
SetEnvironmentVariableA

user32

WinHelpA
MessageBoxA
MapWindowPoints
ChangeDisplaySettingsExA
EnumDisplaySettingsExA
ReleaseDC
KillTimer
PtInRect
GetDlgCtrlID
wsprintfA
GetWindowTextA
EnumWindows
IsWindowVisible
GetWindow
FindWindowExA
LockWindowUpdate
GetClientRect
ShowWindow
EnumChildWindows
PostMessageA
GetClassNameA
GetParent
SetWindowLongA
GetSystemMetrics
FindWindowA
ExitWindowsEx
EnumDisplaySettingsA
EnableWindow
GetDC
BeginPaint
FillRect
EndPaint
DialogBoxParamA
SetTimer
GetDesktopWindow
GetWindowRect
EndDialog
GetDlgItem
SendMessageA
SetWindowPos
SetForegroundWindow
LoadIconA
SendDlgItemMessageA
LoadStringA
SetDlgItemTextA
GetWindowLongA

gdi32

CreateDCA
ExtEscape
GetStockObject
GetObjectA
CreateFontIndirectA
SelectObject
GetTextAlign
SetTextAlign
TextOutA
DeleteObject
DeleteDC

advapi32

RegCreateKeyExA
LookupPrivilegeValueA
RegDeleteValueA
AllocateAndInitializeSid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
FreeSid
RegQueryValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceConfigA
ChangeServiceConfigA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges

rpcrt4

UuidToStringA
RpcStringFreeA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

comctl32

PropertySheetA

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xrdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iwmznoi
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d6a0c86bb789c54a52eae9312277938

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

rpcrt4

version

comctl32

Sections

.text Size: 88KB - Virtual size: 86KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 8KB - Virtual size: 5KB

.xrdata Size: 104KB - Virtual size: 104KB

iwmznoi Size: - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 86KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 8KB - Virtual size: 5KB

.xrdata
Size: 104KB - Virtual size: 104KB

iwmznoi
Size: - Virtual size: 4KB