ef0927668132277ca0693f1afb15da59_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef0927668132277ca0693f1afb15da59_JaffaCakes118
Size

372KB
MD5

ef0927668132277ca0693f1afb15da59
SHA1

16a219047e90ebcf3b1075260df8a8d68648ccef
SHA256

56bbe19cdc5c78023190e30fc719f2d17134e44ce6d6473fb0702e5216a46e70
SHA512

5ab5de2be7b72146ce2ecc4b551ac229a9fd779cddb0fbc4393de5e45ad0095e31e4199337378155445de6f9db24b459dd54333cca53d83dc937eaa9ab2f4b83
SSDEEP

6144:sQCknarkz/YWB4lvZ5YzLg7zgcrRCWdwcucb34rcy3aVDoDTc:vCknarkz/YWB4/aLg4U5dwc14r+oM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef0927668132277ca0693f1afb15da59_JaffaCakes118

Files

ef0927668132277ca0693f1afb15da59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21906efe2f1c2728db53abe3a8160c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\qii\omntgevsu\u

Imports

kernel32

CompareStringW
LCMapStringA
ReadFile
ExitProcess
VirtualQuery
HeapFree
SetCriticalSectionSpinCount
RtlUnwind
InterlockedDecrement
VirtualProtect
VirtualProtectEx
GetFileType
GetACP
GetCurrentProcess
SetHandleCount
TlsSetValue
HeapCreate
GetStdHandle
GetCurrentProcessId
HeapValidate
TlsGetValue
GetDateFormatA
CloseHandle
GetSystemInfo
GetOEMCP
GetVersionExA
InterlockedIncrement
HeapReAlloc
GetLocaleInfoW
SetConsoleCtrlHandler
WideCharToMultiByte
DebugBreak
TlsFree
FlushFileBuffers
IsBadReadPtr
OutputDebugStringA
GetCommandLineA
VirtualFree
DeleteCriticalSection
GetMailslotInfo
GetPrivateProfileSectionNamesA
GetStringTypeA
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetStringTypeW
LoadLibraryA
SetLastError
IsBadWritePtr
FreeEnvironmentStringsA
LeaveCriticalSection
TerminateProcess
IsValidCodePage
CompareStringA
EnumSystemLocalesA
GetUserDefaultLCID
WriteFile
GetTimeZoneInformation
SetEnvironmentVariableA
EnterCriticalSection
LCMapStringW
GetTickCount
CreateMutexA
SetStdHandle
GetLocaleInfoA
SetFilePointer
GetCPInfo
FlushInstructionCache
MultiByteToWideChar
HeapAlloc
GetCurrentThreadId
TlsAlloc
GetTimeFormatA
UnhandledExceptionFilter
GetEnvironmentStringsW
GetModuleHandleA
GetModuleFileNameA
GetCurrentThread
QueryPerformanceCounter
VirtualAlloc
OpenMutexA
GetLastError
InterlockedExchange
GetEnvironmentStrings
InitializeCriticalSection
GetProcAddress
IsValidLocale
GetStartupInfoA
HeapDestroy

comctl32

ImageList_Create
ImageList_GetBkColor
CreateStatusWindow
DrawInsert
ImageList_Duplicate
ImageList_Read
CreateStatusWindowW
InitMUILanguage
DrawStatusText
ImageList_Replace
ImageList_LoadImageA
CreatePropertySheetPage
DestroyPropertySheetPage
ImageList_Add
ImageList_EndDrag
ImageList_BeginDrag
CreateMappedBitmap
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_GetDragImage
InitCommonControlsEx
ImageList_DragLeave

user32

DialogBoxParamW
GetDlgItemInt
DefWindowProcW
IsCharLowerW
CharUpperBuffW
DialogBoxIndirectParamW
OemToCharA
FindWindowExA
LookupIconIdFromDirectoryEx
GetWindowTextLengthA
MessageBoxExA
SendIMEMessageExA
LoadIconW
DdePostAdvise
CloseWindowStation
GetKeyNameTextW
InsertMenuW
SetWindowContextHelpId
PostQuitMessage
PeekMessageW
GetCaretPos
ShowWindow
GetThreadDesktop
BroadcastSystemMessageA
GetMenu
DrawFocusRect
DestroyWindow
EnumDesktopsW
WaitMessage
EndTask
RegisterClassExA
TileChildWindows
InvalidateRect
GetSystemMetrics
GetWindowLongA
CreateDesktopW
GetUpdateRgn
SetFocus
GetWindowModuleFileNameA
CharNextA
RegisterClassA
EqualRect
GetMenuItemID
LookupIconIdFromDirectory
MessageBoxA
DlgDirListW
EnableScrollBar
CreateIconFromResource
wvsprintfA
SetMenuContextHelpId
GetClassInfoExA
TranslateAcceleratorW
ChildWindowFromPoint
CreateWindowExA
DialogBoxParamA
RegisterClipboardFormatW

gdi32

GetTextExtentExPointA
SetICMProfileW
DeleteObject
GetKerningPairs
GetObjectA
DeleteDC
CreateDIBitmap
AbortPath
SetMagicColors
EndPath
CreateDCA
GetDeviceCaps
GetCharacterPlacementA

comdlg32

ChooseColorA

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21906efe2f1c2728db53abe3a8160c8f

Headers

File Characteristics

PDB Paths

Imports

kernel32

comctl32

user32

gdi32

comdlg32

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 92KB - Virtual size: 105KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 92KB - Virtual size: 105KB

.rsrc
Size: 32KB - Virtual size: 28KB