eebbd2e697bb9c0f02ca10d7d139b911_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

eebbd2e697bb9c0f02ca10d7d139b911_JaffaCakes118
Size

612KB
MD5

eebbd2e697bb9c0f02ca10d7d139b911
SHA1

08a2109f762cd407cc50e50362b63b741e74668a
SHA256

8493b9b430523271b038868f9a71e04806e1640669f32b9200c63f94aa996dff
SHA512

146187273eab4aff40205594c185ea9f31694303b38699ac87948245d2bf122064d5c7a64d81b5b082bd849cebd2a7119741cb2daadd6c5458beb2489257dc6c
SSDEEP

12288:PeJapK5CiIxUSOtDQWdwKmnC1KzxP5KP3cxynRsAKRkk4UB:Py2iIxBmwKmnC1SBKPCymj4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eebbd2e697bb9c0f02ca10d7d139b911_JaffaCakes118

Files

eebbd2e697bb9c0f02ca10d7d139b911_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5fa3a3942a45d504bb94a9a269a706d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeGetLastError

gdi32

BitBlt
CreateCompatibleBitmap
SelectObject
DeleteDC
StretchBlt
CreateFontA
DeleteObject
CreateDIBSection
SetTextColor
CreateSolidBrush
SetBkMode
GetTextExtentExPointW
CreateCompatibleDC

kernel32

RtlUnwind
InitializeCriticalSection
LoadLibraryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetLocaleInfoW
HeapSize
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetSystemTimeAsFileTime
HeapReAlloc
LCMapStringW
LocalAlloc
VirtualAlloc
GetStartupInfoA
SetHandleCount
HeapCreate
VirtualFree
FreeEnvironmentStringsW
HeapAlloc
GetCommandLineA
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
HeapFree
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
Sleep
WideCharToMultiByte
GetTimeZoneInformation
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fa3a3942a45d504bb94a9a269a706d4

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 496KB - Virtual size: 496KB

.data Size: 4KB - Virtual size: 139KB

.tls Size: 23KB - Virtual size: 23KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 496KB - Virtual size: 496KB

.data
Size: 4KB - Virtual size: 139KB

.tls
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 17KB - Virtual size: 16KB