3ebec478dfcc97fecdaa6bbd58079bcd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3ebec478dfcc97fecdaa6bbd58079bcd_JaffaCakes118
Size

495KB
MD5

3ebec478dfcc97fecdaa6bbd58079bcd
SHA1

0d7ca3c566e397b4485a78ae60c4c7037f03e27c
SHA256

2691497c3921e5dd14533bbf1f66110f76022570e1453546683e75fce9d84b5d
SHA512

4af552fb986ec742c3bdc223bc35197a5b9623433b96f6a491b1969480c2dacdef554ae3062834dfa92e8d310050d948200563e7780047daa7ed0893f8b5ce2b
SSDEEP

12288:ormJ2ll7yz2Uv4b9u4mhgwiMMnMMMMMK7Res7U9qyvq3GrdHuq8EHtPBgUnz:UV7q2hjydiMMnMMMMMTZY7UtPBTz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ebec478dfcc97fecdaa6bbd58079bcd_JaffaCakes118

Files

3ebec478dfcc97fecdaa6bbd58079bcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

effb13dd4471f5f1eaefbffe523845b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

samlib

SamiEncryptPasswords
SamConnectWithCreds
SamRemoveMultipleMembersFromAlias
SamTestPrivateFunctionsUser

ddraw

DirectDrawEnumerateA

mswsock

sethostname

kernel32

UnlockFile
HeapReAlloc
SetLocalTime
GlobalHandle
GetTimeZoneInformation
CompareStringA
WaitForSingleObject
GetStartupInfoA
ExitThread
GetEnvironmentStringsW
GlobalReAlloc
GlobalLock
GetModuleFileNameW
ResetEvent
TlsGetValue
MulDiv
VirtualAlloc
VirtualProtect
FormatMessageA
HeapFree
FindFirstFileA
ReadFile
GetShortPathNameA
RemoveDirectoryA
GetFileTime
RtlUnwind
GlobalAlloc
CreateFileA
GetVersion
GetStringTypeExA
GetCommandLineA
SetFileAttributesA
GetSystemTime
SetStdHandle
CreateSemaphoreA
GetSystemDirectoryA
GetProfileStringA
LCMapStringW
lstrcmpA
LoadLibraryExA
GetModuleHandleA
HeapCreate
IsDBCSLeadByte
GetTickCount
GetSystemDefaultLCID
FlushInstructionCache
TerminateProcess
LockFile
MoveFileA
GlobalUnlock
GetVolumeInformationA
SizeofResource
WriteFile
InitializeCriticalSection
GetProcAddress
CreateThread
GetStringTypeA
SystemTimeToFileTime
SetFileTime
DuplicateHandle
GetLastError
VirtualFree
LoadLibraryA
GetTempPathA
CloseHandle
lstrlenA
FindNextFileA
GetModuleFileNameA
CreateProcessA
GetWindowsDirectoryA
GetCPInfo
IsBadReadPtr
Sleep
CreateProcessW
SetHandleCount
TlsAlloc
GetVersionExA
SearchPathA
SetCurrentDirectoryA
EnterCriticalSection
FreeEnvironmentStringsA
FindClose
CreateMailslotA
LoadResource
GetOEMCP
lstrcpyA
lstrcpynA
GetFileType
GetFullPathNameA
InterlockedDecrement
FlushFileBuffers
GetDriveTypeA
lstrcmpiW
SetLastError
HeapAlloc
GlobalAddAtomA
DeleteFileA
GetExitCodeProcess
RaiseException
CompareStringW
GetEnvironmentStrings
GetUserDefaultLangID
GetCurrentDirectoryA
WideCharToMultiByte
IsBadCodePtr
VirtualQuery
TlsSetValue

user32

CallMsgFilterW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 153KB - Virtual size: 1024KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

effb13dd4471f5f1eaefbffe523845b5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

samlib

ddraw

mswsock

kernel32

user32

Sections

.text Size: 1KB - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 3KB

.data Size: 153KB - Virtual size: 1024KB

.reloc Size: 512B - Virtual size: 72B

.rsrc Size: 130KB - Virtual size: 130KB

.rdata Size: 205KB - Virtual size: 204KB

.text
Size: 1KB - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 3KB

.data
Size: 153KB - Virtual size: 1024KB

.reloc
Size: 512B - Virtual size: 72B

.rsrc
Size: 130KB - Virtual size: 130KB

.rdata
Size: 205KB - Virtual size: 204KB