ebf8b2c665df02acebfc0bd2adb0d684_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ebf8b2c665df02acebfc0bd2adb0d684_JaffaCakes118
Size

1020KB
MD5

ebf8b2c665df02acebfc0bd2adb0d684
SHA1

0b2dd63cf0f18fe68d8473d5dde91429fc9b2814
SHA256

21ae33e668359555c1e6a4c3129a882e4ebf09f17f93e1cf632c27abb3715691
SHA512

5aa06d7fe7dfd7805b72effb369b3516e9d2a51ea5fbfd83ab220935f82185119fd8e5d52371e2a9d7a6adbae4c59fddd8c3c87934444b9b090e528cebfe3f8a
SSDEEP

24576:ENJmVDy0/LJaHDEQFpMFbdjC25hNAePHU6FM:ENOQDhXMFbtfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf8b2c665df02acebfc0bd2adb0d684_JaffaCakes118

Files

ebf8b2c665df02acebfc0bd2adb0d684_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9e6a9044b4a9276ef3bb52b16f3f5455

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
DeleteFileW
CreateProcessW
FileTimeToLocalFileTime
GetLocalTime
CloseHandle
WriteFile
WriteConsoleW
SetFilePointerEx
GetFileSize
GetLastError
GetCurrentThreadId
GetEnvironmentStringsW
VirtualAlloc
GetProcAddress
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetOEMCP
GetACP
IsValidCodePage
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
CreateFileW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW

crypt32

CryptBinaryToStringW
CertVerifyCertificateChainPolicy
CryptProtectData
CertGetNameStringW
CertNameToStrW
CryptExportPKCS8
CertVerifyTimeValidity
CertGetPublicKeyLength
CertGetEnhancedKeyUsage
CryptDecodeObject
CryptEnumOIDInfo
CryptMsgOpenToDecode
CertOpenStore
CertCloseStore
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertFreeCRLContext
CertAddEncodedCertificateToStore
CertAddCertificateContextToStore
CertFreeCTLContext
CertAddStoreToCollection
CertControlStore

ole32

CoTaskMemAlloc

comdlg32

PageSetupDlgW
PrintDlgExW
ChooseFontW
FindTextW
GetFileTitleW

setupapi

SetupFindFirstLineW
SetupGetFieldCount
SetupOpenFileQueue
SetupInstallFromInfSectionW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoListExW
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
SetupDiGetClassDevsW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiGetActualSectionToInstallW
CM_Get_Device_ID_ExW
SetupCloseInfFile

shlwapi

PathCombineW
PathAddBackslashW
StrRetToBufW
StrRetToStrW
PathFileExistsW
StrToIntExW
StrStrIW
StrRChrW
StrFormatByteSizeW
StrChrIW
PathFindExtensionW
PathGetDriveNumberW
PathIsDirectoryW
PathIsRootW
PathRemoveBlanksW
PathRemoveExtensionW
PathSkipRootW
PathStripToRootW
UrlIsW
UrlUnescapeW
UrlEscapeW
SHDeleteEmptyKeyW
SHDeleteKeyW
SHDeleteValueW
SHGetValueW
SHAutoComplete
StrTrimW
PathRemoveBackslashW

mpr

WNetEnumResourceW

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 927KB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e6a9044b4a9276ef3bb52b16f3f5455

Headers

File Characteristics

Imports

kernel32

crypt32

ole32

comdlg32

setupapi

shlwapi

mpr

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 927KB - Virtual size: 7.4MB

.rsrc Size: 15KB - Virtual size: 18KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 927KB - Virtual size: 7.4MB

.rsrc
Size: 15KB - Virtual size: 18KB