ea7642ffb5c98e7f798f29129a64992e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ea7642ffb5c98e7f798f29129a64992e_JaffaCakes118
Size

396KB
MD5

ea7642ffb5c98e7f798f29129a64992e
SHA1

3349fbba067b988f38fe202702dedbfab0a41183
SHA256

7647f59703849df9663b9756a6f323ee3e59852463f21a7fc139828a3aa5802f
SHA512

2f7c79b373fa7fca06eb93adbedbc6885de80a674ad111c59706492b594fa5d0963e580568924d660188554b31de057c7b700423edb81dfd1895aa054ffd59ca
SSDEEP

12288:eVaauWatLv/kjWaesK3YSYJmlzFZ3IHmMr:e03DkjtLS5hVq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea7642ffb5c98e7f798f29129a64992e_JaffaCakes118

Files

ea7642ffb5c98e7f798f29129a64992e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b3fd014c201ba333650fb1f00161ed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetDisconnectDialog
MultinetGetConnectionPerformanceA
WNetUseConnectionA
WNetCancelConnectionA

advapi32

SetServiceStatus
GetServiceKeyNameA
RegOpenKeyExA
LsaQueryInformationPolicy
CloseServiceHandle
ReadEventLogW
RegCloseKey
CreateProcessAsUserW
QueryServiceLockStatusW
OpenEventLogW
RegisterServiceCtrlHandlerW
SetServiceObjectSecurity
RegSetValueExW
StartServiceCtrlDispatcherW

rasapi32

RasGetConnectStatusA
RasEnumConnectionsA

msvcrt

_setmbcp
_except_handler3
_mbsrev
__dllonexit
_onexit
acos
_wexecl
atol
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

user32

GetClassNameW
GetScrollPos
VkKeyScanW
CopyIcon
FindWindowA
LoadCursorFromFileA
TranslateMessage
MapVirtualKeyExW
WindowFromPoint
SetTimer
DrawIconEx
GetDoubleClickTime
SetCaretPos
DestroyCaret
RemoveMenu
ChangeDisplaySettingsA
MessageBoxA
IsCharLowerA
CharLowerA
CreateDialogIndirectParamW
PostMessageA
DrawStateW
CopyAcceleratorTableW
SendDlgItemMessageW
GetClipCursor
DrawTextW
CreateCursor
CharUpperBuffW
GetProcessWindowStation
LoadImageA
MoveWindow
DialogBoxIndirectParamW
ReuseDDElParam
SetWindowTextW
SetPropA
RegisterHotKey
SendInput
GetKeyboardState
MessageBeep
CloseClipboard
DrawIcon
GetCaretPos
EmptyClipboard
PostThreadMessageA
PostThreadMessageW
GetTabbedTextExtentA
RegisterClassExW
FindWindowExA
GetParent
SetDlgItemTextW
ClientToScreen
EnableScrollBar
WindowFromDC
CreateDialogIndirectParamA
wvsprintfA
CreateWindowExW
GetWindowLongA
GetSystemMetrics
TranslateAcceleratorA
DestroyMenu
GetMenuItemCount
ModifyMenuA
DefFrameProcW
SetWindowLongA
GetDlgItemTextA
FindWindowExW
SetClipboardData
CloseDesktop
GetUserObjectInformationW
CharUpperA
GrayStringW
GetMessageExtraInfo
GetScrollRange
DdeFreeStringHandle
SetWindowTextA
GetMessageA
BeginDeferWindowPos
CharLowerBuffA
ShowOwnedPopups
AttachThreadInput
BlockInput
DispatchMessageA
TrackPopupMenuEx
SetClassLongA
LockWindowUpdate
GetKeyState
SystemParametersInfoA
GetKeyNameTextW
CallMsgFilterA
SendNotifyMessageW
PostMessageW
PackDDElParam
SetWindowRgn
ChangeClipboardChain
RegisterWindowMessageA
DialogBoxParamA
SetWindowPlacement
InvalidateRect
GetMessagePos
DrawTextA
GetClassInfoW
GetSysColor

gdi32

CreateDCW
SwapBuffers
DeleteEnhMetaFile
SetAbortProc
EnumFontsW
GetWinMetaFileBits
GetNearestPaletteIndex
IntersectClipRect
GetRgnBox
GetPolyFillMode
CombineRgn
GetROP2
CreateBitmap
GetDIBits
GetClipRgn
SetWindowOrgEx
GetObjectA
GetCharWidthA
SetDeviceGammaRamp
TextOutA
AbortDoc
ExtTextOutA
GetKerningPairsA
RemoveFontResourceA
SelectClipRgn
DeleteObject
EnumFontFamiliesA
ResetDCW
CreateDCA
SaveDC
SetPixel
OffsetWindowOrgEx
OffsetClipRgn
PatBlt
GetTextMetricsA
SetBitmapBits
SetWinMetaFileBits
GetObjectW
CreateEllipticRgn
RectVisible
GetTextCharsetInfo
SetTextAlign
GdiFlush
CreateDIBSection
LPtoDP
GetFontData
Ellipse
GetPixel
CopyEnhMetaFileA
GetDIBColorTable
EnumMetaFile
EndPage
RectInRegion
CreateICA
WidenPath
PolyBezierTo
RealizePalette
GetMapMode
ExtCreatePen
GetStockObject
CreateMetaFileA
GetDeviceCaps
SetROP2

kernel32

FileTimeToSystemTime
BackupSeek
GetProcessAffinityMask
GetStringTypeA
MulDiv
DeleteFiber
GetWindowsDirectoryW

mfc42

ord815
ord6375
ord4486
ord2554
ord1084
ord5731
ord3922
ord1089
ord1050
ord2396
ord3346
ord1048
ord5302
ord2725
ord1077
ord4698
ord5307
ord1037
ord5714
ord1079
ord2982
ord1089
ord3259
ord4465
ord1066
ord3262
ord2985
ord3081
ord2976
ord3401
ord3830
ord3831
ord3825
ord3079
ord4080
ord1076
ord4424
ord3738
ord561
ord1576
ord1168

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b3fd014c201ba333650fb1f00161ed2

Headers

File Characteristics

Imports

mpr

advapi32

rasapi32

msvcrt

user32

gdi32

kernel32

mfc42

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 68KB - Virtual size: 2.6MB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 68KB - Virtual size: 2.6MB

.rsrc
Size: 16KB - Virtual size: 12KB