JaffaCakes118_eb9f9ad91d3ca6699f5fd0570bde159e

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_eb9f9ad91d3ca6699f5fd0570bde159e
Size

264KB
MD5

eb9f9ad91d3ca6699f5fd0570bde159e
SHA1

c0b2d7e59823708e4e98d429e895f0089c4d6826
SHA256

2665904be0a3e65451ba6d381f5ad2d62a21de169e5dd8ee371a79117be1fbe8
SHA512

5dbb2d80f5543ac58a6dc18a3eaea571a89fea5c4035a527a81140ec10758a99bd3e010badcc2605934ce9bec2abd161cfb4c2060c0dfaeb416e132b16f6b176
SSDEEP

6144:0zpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:Ewc7a4hooxDAkbOaMa/0o/z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_eb9f9ad91d3ca6699f5fd0570bde159e

Files

JaffaCakes118_eb9f9ad91d3ca6699f5fd0570bde159e
.exe windows:4 windows x86 arch:x86

5493ecdcd746b846d41ba4697387c0be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
GetSystemDefaultLCID
GetLongPathNameW
OpenMutexA
SetComputerNameW
MoveFileA
EnumDateFormatsW
IsValidLocale
SetCurrentDirectoryW
GlobalAlloc
GetHandleInformation
CreateDirectoryW
AddAtomA
GetExitCodeThread
GetExitCodeProcess
ReadDirectoryChangesW
CreateDirectoryA
CreateMailslotW
DuplicateHandle
SetCalendarInfoW
GetWindowsDirectoryA
GetSystemDirectoryA
GetProcAddress
SearchPathA
GetSystemInfo
GetModuleHandleA
ReplaceFileA
SetErrorMode
GetModuleHandleA
FreeLibrary
ReplaceFileW
GetAtomNameW
SetLocaleInfoA
SetEvent
GetModuleFileNameW
WaitForSingleObject
lstrlenW
TlsAlloc
MoveFileW
lstrcmpiA
OpenWaitableTimerA
IsBadCodePtr
EnumCalendarInfoW
GlobalFindAtomW
GetMailslotInfo
GetVolumeInformationW
lstrcmpA
GetExpandedNameW
FindAtomW
lstrcpy
GetStartupInfoW
AddAtomW
lstrcpyW
GetEnvironmentVariableA
OpenSemaphoreW
lstrcatW
LoadResource
EnumDateFormatsA
GetLogicalDriveStringsA
CompareFileTime
FindResourceA
OpenEventW
Beep
lstrcpyn
GetVersion
GetCPInfo
GetModuleHandleW
FindResourceW
GetShortPathNameW
GetTempPathA
CreateSemaphoreW
GetLogicalDrives
GetTimeFormatA
GetCurrentThreadId

user32

MessageBoxIndirectA
LoadCursorA
OpenClipboard
RemoveMenu
MonitorFromPoint
keybd_event
GetCaretPos
CreateDialogParamA
MonitorFromWindow
GetKeyboardLayout
IsMenu
CreateDesktopW
GetMessageW
GetMenuItemInfoW
GetClassInfoA
CreateWindowExW
TrackPopupMenuEx
GetClassInfoW
DefWindowProcW
MessageBoxA
DialogBoxParamA
SetCursor
ShowCursor
GetSystemMetrics
LoadCursorW
CopyIcon
LoadImageA
GetCapture
CreateDesktopA
IsIconic
LoadMenuA
CreateDialogParamW
GetMenuItemCount
GetDlgItemInt
CreateDialogIndirectParamA
CharPrevA
SetWindowTextW
AdjustWindowRect
SendMessageW
mouse_event
GetActiveWindow
ShowWindow
GetSysColor
GetScrollPos
GetForegroundWindow
GetKeyboardType
InsertMenuItemW
RegisterWindowMessageA
LoadBitmapA
PostQuitMessage
DialogBoxParamW
GetDlgItemTextA
SetWindowPos
SetWindowTextA
wsprintfA
DialogBoxIndirectParamW
CharNextW
WaitMessage
CreatePopupMenu
MonitorFromRect
AppendMenuW
wvsprintfW
CharPrevW
SetTimer
DestroyIcon
RegisterWindowMessageW
SetFocus
SetActiveWindow
GetCursorPos
CheckMenuItem
GetFocus
ShowCaret
EndMenu
InvalidateRect
SendDlgItemMessageW
CreateAcceleratorTableA
SetWindowLongW
UnregisterClassA
GetSubMenu
EmptyClipboard

gdi32

GetRasterizerCaps
GetStockObject
UpdateICMRegKeyW
SetMetaFileBitsEx
RemoveFontResourceW
CreateDIBPatternBrushPt
CreateScalableFontResourceW
GetTextExtentPointW
CreateColorSpaceA
CreateFontIndirectW
CreateFontW
CreatePatternBrush
CreatePolygonRgn
CreateFontIndirectA
GetTextExtentPointA
GetMetaFileW
SelectBrushLocal
CreateBitmap
CreateDIBSection
UpdateICMRegKeyA
CreateCompatibleDC
GdiGetBatchLimit
CreateEllipticRgn
ExtCreateRegion
TranslateCharsetInfo
CreateICW
AddFontResourceA
CreateBitmapIndirect
CreateRoundRectRgn
CreateScalableFontResourceA
RemoveFontResourceExW
DeleteObject
CreateMetaFileA
CreateColorSpaceW
GetMetaFileA
CreateFontA
CreateICA

advapi32

OpenEventLogA
IdentifyCodeAuthzLevelW
SetSecurityDescriptorDacl
LsaICLookupSids

version

VerFindFileW
VerInstallFileW
VerInstallFileA
VerLanguageNameW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerFindFileA
VerQueryValueA

mprapi

MprAdminMIBEntryCreate
MprAdminInterfaceTransportAdd
MprAdminTransportGetInfo
MprInfoDuplicate
MprDomainQueryRasServer
MprConfigServerConnect
MprInfoBlockAdd
MprConfigBufferFree
MprAdminConnectionClearStats
MprAdminTransportSetInfo
MprDomainRegisterRasServer
MprAdminGetErrorString
MprConfigTransportEnum
MprAdminRegisterConnectionNotification
RasPrivilegeAndCallBackNumber
MprConfigInterfaceTransportEnum
MprAdminInterfaceGetHandle
MprConfigTransportGetHandle
MprAdminInterfaceGetCredentialsEx
MprConfigInterfaceTransportAdd
MprAdminMIBServerConnect
MprConfigServerInstall
MprInfoBlockAdd

crypt32

CryptGetDefaultOIDDllList
I_CertUpdateStore
I_CryptFindLruEntry
CertSerializeCRLStoreElement
CryptMsgCountersign
CertVerifyCertificateChainPolicy

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.C
Size: 111KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srgyuO
Size: 112KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5493ecdcd746b846d41ba4697387c0be

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

version

mprapi

crypt32

Sections

.text Size: 12KB - Virtual size: 12KB

.C Size: 111KB - Virtual size: 164KB

.edata Size: 5KB - Virtual size: 276KB

.rdata Size: 6KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 93KB

.srgyuO Size: 112KB - Virtual size: 189KB

.edata Size: 4KB - Virtual size: 120KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.C
Size: 111KB - Virtual size: 164KB

.edata
Size: 5KB - Virtual size: 276KB

.rdata
Size: 6KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 93KB

.srgyuO
Size: 112KB - Virtual size: 189KB

.edata
Size: 4KB - Virtual size: 120KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 4KB