ebe589bc90347b9ad87d6c155680773a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ebe589bc90347b9ad87d6c155680773a_JaffaCakes118
Size

212KB
MD5

ebe589bc90347b9ad87d6c155680773a
SHA1

48c77af8043234a6d977f898b62ac1739481e69b
SHA256

9f06cecfc7c3d0cd673bf8ce9d719a7243e98b056a942729157becdc0729ed45
SHA512

caec84bae8c99d0127a51a083fab5270db74be9fd1f5bd6817bd23d884cd5ea84376dfa5dbcc403ec46c38bbb636993db3f492c1717145b72a18255cd0fc493c
SSDEEP

6144:9LUQO61ipP4hEjmmMshNIzcg7Zd9aooCOD:NOMk4Ejmm5w4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebe589bc90347b9ad87d6c155680773a_JaffaCakes118

Files

ebe589bc90347b9ad87d6c155680773a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

13ecfa07f06fcfdaea738423db8acca1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
SetFilePointer
ReadFile
ExpandEnvironmentStringsA
HeapCreate
GetStdHandle
GetCommandLineA
OpenEventA
HeapAlloc
GetCPInfo
lstrlenA
SizeofResource
ResetEvent
GetThreadContext
ExitProcess
lstrcpyA
GetConsoleMode
EnterCriticalSection
ExitThread
GetProcessAffinityMask
PulseEvent
GetCurrentProcessId
GetStartupInfoA
IsDebuggerPresent
InterlockedExchange
GetDateFormatA
GetConsoleCP
FreeEnvironmentStringsA
TlsFree
IsBadReadPtr
LCMapStringA
InitializeCriticalSection
LeaveCriticalSection
CreateProcessA
GetDriveTypeA
Module32Next
WaitForSingleObject
Sleep
TerminateThread
MulDiv
WaitForMultipleObjects
SearchPathA
LocalAlloc
RaiseException
SetPriorityClass
MapViewOfFile
GetEnvironmentVariableA
GlobalUnlock
HeapFree
GetVersionExA
VirtualFree
DeviceIoControl
GetEnvironmentStrings
IsBadStringPtrA
GetProcessWorkingSetSize
TlsSetValue
FindFirstFileA
GetStringTypeW
FormatMessageA
LockResource
GetTickCount
CreateFileMappingA
SetStdHandle
GetVersion
TerminateProcess
QueryPerformanceCounter
DeleteCriticalSection
GetCurrentProcess
FreeEnvironmentStringsW
GetModuleHandleW
DuplicateHandle
GetModuleFileNameA
LCMapStringW
GetNumberFormatA
InterlockedIncrement
lstrcmpA
lstrcmpiA
GlobalAddAtomA
FindClose
CreateEventA
CreateToolhelp32Snapshot
SetErrorMode
SetUnhandledExceptionFilter
VirtualQueryEx
QueryPerformanceFrequency
lstrlenW
FreeLibrary
LocalFree
ReadProcessMemory
GlobalLock
CloseHandle
FlushFileBuffers
GetModuleHandleA
GetStringTypeA
GetFileAttributesA
WriteConsoleA
GetProcessHeap
SetProcessWorkingSetSize
FindResourceA
GetTimeFormatA
GetOEMCP
GetLastError
FileTimeToLocalFileTime

user32

GetWindow
DestroyIcon
SendMessageTimeoutA
GetKeyState
UnionRect
GetParent
ExitWindowsEx
TrackPopupMenuEx
GetClientRect
CreateMenu
RegisterClassExA
SetClipboardData
EnableWindow
GetDlgItemTextA
GetClassNameA
CallWindowProcA
DialogBoxIndirectParamA
PostQuitMessage
GetMenuItemCount
DefDlgProcA
DeferWindowPos
SetTimer
GetDlgCtrlID
InflateRect
LoadIconA
AppendMenuA
GetSystemMetrics
UpdateWindow
EnumChildWindows
GetWindowDC
CheckDlgButton
SetClassLongA
MsgWaitForMultipleObjects
KillTimer
CreatePopupMenu
GetDC
DrawFrameControl
GetMenuItemID
DestroyWindow
IsDialogMessageA
IsDlgButtonChecked
GetWindowPlacement
ChildWindowFromPoint
OffsetRect
GetCapture
ModifyMenuA
LoadStringA
SetCursor
BeginDeferWindowPos
GetFocus
GetWindowLongA
LoadCursorA
FrameRect
ClientToScreen
DefFrameProcA
LoadAcceleratorsA
IsIconic
DeleteMenu
RedrawWindow
GetSubMenu
SetCapture
wsprintfA
GetDesktopWindow
CheckMenuItem
PeekMessageA
EndDeferWindowPos
InvalidateRect
EndDialog
IsZoomed
RegisterWindowMessageA
DrawEdge
GetMessageA
CreateWindowExA
CheckMenuRadioItem
EmptyClipboard
EndPaint
SetWindowPlacement
EnableMenuItem
GetSysColorBrush
SetPropA
FindWindowA
PostMessageA
MessageBoxA
RemoveMenu
IsWindowVisible
SetUserObjectSecurity
SetFocus
DrawTextA
GetDoubleClickTime
ShowWindowAsync
GetUpdateRgn
ReleaseCapture
InsertMenuA
SetWindowTextA
CheckRadioButton
EnumWindows
CreateIconIndirect
TranslateMessage
TrackPopupMenu
DialogBoxParamA
GetScrollInfo
SetMenuItemInfoA
IntersectRect
SetDlgItemTextA
PtInRect

msvcrt

__p__commode
__setusermatherr
__p__fmode
_except_handler3
_adjust_fdiv
_controlfp
_acmdln
_exit
__set_app_type
__getmainargs
_initterm
exit
memcpy
_XcptFilter

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13ecfa07f06fcfdaea738423db8acca1

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 186KB - Virtual size: 186KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 164B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 186KB - Virtual size: 186KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 164B