ebe4ca63d0b55160049a7be0719729fa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ebe4ca63d0b55160049a7be0719729fa_JaffaCakes118
Size

118KB
MD5

ebe4ca63d0b55160049a7be0719729fa
SHA1

7f5cc4bf6e4a1f44bfafbb96997705e46bc93da1
SHA256

9ea2ece79b161915736b902481bb89cdc8ffc954d8fdd6167e71a952d54dbc1e
SHA512

c1e705b7ce848596fc2dd2416e951330e79daa27c521ca034b1c6815bf69ab116764a3e6f6a751e6e12c4744c86cb5912e9d83df968d0e47c782bd924a533097
SSDEEP

1536:9HodfNO5L56yerm63krmM6i8v+UWBhteG1kAo2fs2n+0p7e125Dum8v1Czfao1Q6:9+oIy83co+x/elo1+0p7e125DKC2L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebe4ca63d0b55160049a7be0719729fa_JaffaCakes118

Files

ebe4ca63d0b55160049a7be0719729fa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cda9719742357712ee3eeb6a94c3870b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\Twxbyof\lHSNW\Opbsu\paqvAre.pdb

Imports

ntdll

memset

kernel32

ExitProcess
GetVersionExA
GetAtomNameW
GetFileAttributesExW
GetModuleHandleExW
FindResourceExW
SetFileTime
DeleteFileA

shlwapi

PathRemoveFileSpecW
StrIsIntlEqualA
PathCanonicalizeW
PathCommonPrefixW
ChrCmpIW

comctl32

PropertySheetW
ImageList_LoadImageW
CreateToolbarEx
CreatePropertySheetPageA

user32

ActivateKeyboardLayout
GetWindowTextA
GetDesktopWindow
WaitMessage
GetParent
BringWindowToTop
InSendMessageEx
GetWindowContextHelpId
SendMessageTimeoutA
TranslateAcceleratorW
CharLowerBuffW
GetWindow
SystemParametersInfoA

gdi32

GetROP2
SetDIBColorTable
TranslateCharsetInfo
CreateICW
CreateFontIndirectW
RectInRegion

Exports

Exports

?lxaSxsuhHnq@@YGPAND@Z
?vtnFcfyPxKtxi@@YGPAXPADI@Z
?pwkczmZvwkgtTzLdwvu@@YGKEPAN@Z
?PSfftfevimjNIl@@YGPAN_NJ@Z

Sections

.text
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cda9719742357712ee3eeb6a94c3870b

Headers

File Characteristics

PDB Paths

Imports

ntdll

kernel32

shlwapi

comctl32

user32

gdi32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 172B

.code Size: 24KB - Virtual size: 24KB

.data Size: 64KB - Virtual size: 227KB

.rdata Size: 24KB - Virtual size: 24KB

.edata Size: 512B - Virtual size: 204B

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 172B

.code
Size: 24KB - Virtual size: 24KB

.data
Size: 64KB - Virtual size: 227KB

.rdata
Size: 24KB - Virtual size: 24KB

.edata
Size: 512B - Virtual size: 204B

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB