037d8e8c2a1c9fe1c588f2e3436c4e40_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

037d8e8c2a1c9fe1c588f2e3436c4e40_JaffaCakes118
Size

30KB
MD5

037d8e8c2a1c9fe1c588f2e3436c4e40
SHA1

9116c5ac63fc0f911bebf470126d3cc18581516d
SHA256

45bf90d1b5a089ee6e48dd0cdafa485d22c5c646f1389d478f60fe46424ed663
SHA512

01255395fb9f6331788c318ad10d440f98fd9823495063365077f3eaf0dede2b7949e732a1e40796c9b36a54e5cd1a86d8d141dac97c10977b5f3dc579c78150
SSDEEP

768:Baxbp5O7U2syTPXHGOpblwgV/OJh5VQ/4:BaxncnsGfRpBw2/OJh5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
037d8e8c2a1c9fe1c588f2e3436c4e40_JaffaCakes118

Files

037d8e8c2a1c9fe1c588f2e3436c4e40_JaffaCakes118
.exe windows:1 windows x86 arch:x86

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vscprintf
_acmdln
_chmod
_mbcjmstojis
memcpy
_wtof
_adj_fpatan
_mbsncpy
_ismbbkpunct
_expand
_resetstkoflw
_wsystem
_wspawnv
isalpha
_wtmpnam
log10
__setusermatherr
_stat64
clock
_strset
getchar
printf
perror
_snwscanf
_safe_fdiv
_wstat
_wspawnvp
setlocale
memset
puts
_wsopen
_aligned_offset_malloc
_locking
_except_handler3
_ismbbkalnum
__p__fmode
fprintf
_controlfp
freopen
_ismbclegal
_aligned_offset_realloc
_adjust_fdiv
_cexit
_initterm
fscanf
_ismbstrail
_fcvt
_snscanf
fwscanf
ungetc
getwchar
_ftol
_beep
_exit
_getdcwd
wcstol
_execlp
_wopen
_lrotl
__set_app_type
fputwc
_mbsnbcpy
_spawnle
__getmainargs
fgets
_strtoui64
_cwprintf
_XcptFilter
_chkesp
exit
_ismbblead
_execvpe
_futime
_wremove
system
__p__commode
_isatty
_strlwr
_sys_errlist
_mbsupr

user32

IsWindowVisible
IsDlgButtonChecked
ClientToScreen
GetWindowLongA
EnableMenuItem
ExitWindowsEx
ShowWindowAsync
SetWindowPos
GetPropA
CreateWindowExA
GetSubMenu
DrawTextA
LoadAcceleratorsA
GetUserObjectSecurity
TranslateAcceleratorA
GetCapture
GetClassNameA
CheckRadioButton
IsZoomed
LoadMenuA
FillRect
MsgWaitForMultipleObjects
IntersectRect
TrackPopupMenuEx
ScrollWindowEx
GetWindowTextA
ReleaseDC
MoveWindow
GetDC
CheckMenuItem
RegisterClassExA
GetKeyState
ChildWindowFromPoint
RegisterWindowMessageA
LoadCursorA
RemoveMenu
EnumChildWindows
TrackPopupMenu
GetSysColor
CreateMenu
OffsetRect
GetCursorPos
ScreenToClient
ShowWindow
LoadIconA
GetParent
SetPropA
ReleaseCapture
GetMessageA
ModifyMenuA
DialogBoxParamA
SetWindowLongA
GetWindowRect

kernel32

GetStartupInfoA
GlobalMemoryStatus
lstrlenA
IsBadReadPtr
GetTickCount
DuplicateHandle
GetFileTime
GetCPInfo
GlobalAddAtomA
CreateEventA
IsValidCodePage
VirtualAlloc
SetThreadAffinityMask
GetModuleHandleA
TlsSetValue
MulDiv
GetACP
SetPriorityClass
GetSystemTimeAsFileTime
GetProcessWorkingSetSize
lstrcmpiA
SetProcessWorkingSetSize
GetComputerNameW
HeapReAlloc
CreateThread
SetErrorMode
GetSystemDirectoryA
RtlUnwind
IsBadStringPtrA
ExitProcess
lstrcatA
HeapFree
CreateFileMappingA
GetFileType
GetStringTypeA
LoadLibraryW
WaitForSingleObject
GetTimeFormatA
GetVersionExA
CloseHandle
GetStdHandle
TlsAlloc
GetCurrentProcessId

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 175B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 175B

.rsrc
Size: 512B - Virtual size: 4B