27657509a411bc300e78a2987c567060_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27657509a411bc300e78a2987c567060_JaffaCakes118
Size

190KB
MD5

27657509a411bc300e78a2987c567060
SHA1

95f45f6db799bdf0baa9b3daa0c3d56b78157b0c
SHA256

0cd287f581d83f518e40806995e3b1c92da8e3cd533bcfe5f97b9aa6bd5aeeb1
SHA512

c68f9de02f54b3c0738dd314934c748ae76ae718b95d33eef7a4bf21b93a73580c25f97c637f41ed2d7f39867e5905d90beb999db6cab8132bbb97c7e600b026
SSDEEP

3072:Cz4WPLH8qEhrsVRGJydlEfcj5rSCjUsed3HzzqG4bqS0+BTKIz7:C0WPoqsURGLWuC+dXzzqnbDc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27657509a411bc300e78a2987c567060_JaffaCakes118

Files

27657509a411bc300e78a2987c567060_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
ChooseColorW
ReplaceTextW
GetSaveFileNameW

gdi32

GetROP2
TextOutA
ResizePalette
LPtoDP
SetLayout
CreateRectRgnIndirect
CreateHatchBrush
LineDDA
SetBitmapBits
GetPaletteEntries
CreateFontA
WidenPath
SelectPalette
SetPaletteEntries
SetBkColor
EndPage
Polyline
GetBkMode
GetRgnBox
CreatePalette
RemoveFontResourceW
IntersectClipRect
GetBitmapBits
SetMapMode
AddFontResourceW
GetTextAlign
SetDIBColorTable
CreateBitmapIndirect
CreateSolidBrush
GetTextExtentPointW
PtInRegion
GetNearestColor
Escape
CreatePolygonRgn
SetViewportOrgEx
PolyBezier
StretchDIBits
GetDeviceCaps
SetTextAlign
CombineRgn
GetTextMetricsA
GetTextCharsetInfo
GetSystemPaletteUse
CreateRoundRectRgn
CreateDIBitmap

comctl32

CreatePropertySheetPageA
ImageList_Draw
ImageList_GetIconSize
ImageList_Write
DestroyPropertySheetPage
CreateToolbarEx

kernel32

lstrcpyA
TryEnterCriticalSection
FindResourceA
EnumResourceTypesA
GetLastError
HeapAlloc
GetTempPathW
FindAtomW
SetCommMask
IsDBCSLeadByte
GlobalReAlloc
HeapWalk
SetTimerQueueTimer
WideCharToMultiByte
WaitCommEvent
GetTimeFormatA
HeapReAlloc
FindAtomA
GlobalMemoryStatus
GetStartupInfoW
RtlUnwind
GlobalAlloc
GetCurrentThread
GlobalGetAtomNameW
GetPriorityClass
GetFileAttributesA
GetSystemWindowsDirectoryA
LeaveCriticalSection
GetNumberFormatW
GetCommandLineA
GetComputerNameExW
FoldStringW
GlobalCompact
GetEnvironmentStringsW
MoveFileW
GetCPInfo
CreateRemoteThread
UnlockFile
GlobalAddAtomW
CopyFileA
GetThreadLocale
GetCompressedFileSizeW
FindFirstChangeNotificationW
WaitForMultipleObjectsEx
lstrcatA
GetSystemInfo
GetUserDefaultLangID
FormatMessageW
VirtualLock
ConnectNamedPipe
GetModuleHandleW
GetStringTypeExW
SetCurrentDirectoryW
GetThreadTimes

user32

IsRectEmpty
GetClassLongW
SetMenuItemBitmaps
IntersectRect
GetClassLongA
MessageBoxW
PtInRect
IsChild
InvertRect
GetClientRect
GetMessageW
RegisterClassA
DrawFrameControl
CreateAcceleratorTableW
CheckMenuItem
GetNextDlgGroupItem
UpdateWindow
MapVirtualKeyA
CharNextW
InvalidateRgn
GetAsyncKeyState
LoadCursorA
GetScrollPos
FrameRect
MonitorFromRect
SetParent
FindWindowExA
CopyImage
ScrollWindow
LockWindowUpdate
ScrollWindowEx
UnionRect
GetMenuStringA
GetUpdateRect
GetUserObjectInformationA
TranslateAcceleratorA
DialogBoxParamW
GetClassInfoW
GetMenuCheckMarkDimensions
IsDialogMessageW
GetParent
GetMenuItemCount
GetMenu
SetWindowPos
SetDlgItemTextA
CharLowerA
GetWindowTextA
BeginPaint
CharLowerW
GetSysColorBrush
PostThreadMessageW
DispatchMessageA
GetWindow
InvalidateRect
LoadAcceleratorsW
EnumChildWindows
CreateCursor
ShowWindowAsync
DrawTextA
CreateWindowExW
GetClipCursor
SendMessageW
InsertMenuItemW
GetWindowTextW
OemToCharA
SwitchToThisWindow
GetMenuItemInfoW
CreateWindowExA
CharToOemBuffA
LoadStringW
ReplyMessage
LoadBitmapA
InflateRect
GetActiveWindow
SetCursor
ToUnicodeEx
OpenInputDesktop
DefDlgProcA
CallWindowProcW
OpenDesktopW
EndDialog
SetCaretPos
mouse_event
GetDlgItemInt
GetForegroundWindow
GetClassInfoExA
DefFrameProcA
CharToOemW
RegisterWindowMessageA
LoadIconA
TrackPopupMenuEx
DrawStateW
RegisterClassExA
keybd_event
GetUpdateRgn
SetRectEmpty
DrawMenuBar
SendDlgItemMessageA
ClipCursor
SetForegroundWindow
GetIconInfo
CreateCaret
SetUserObjectInformationW
MonitorFromPoint
SetTimer
SendNotifyMessageW
GetNextDlgTabItem
SetDlgItemTextW
CallWindowProcA

msvcrt

strspn
_controlfp
free
realloc
__set_app_type
mbtowc
__p__fmode
wcsstr
sprintf
__p__commode
strncmp
fprintf
_amsg_exit
gmtime
remove
vswprintf
towupper
wcsrchr
_initterm
_ismbblead
fflush
gets
strpbrk
strtoul
srand
setlocale
exit
strcpy
isalpha
bsearch
_XcptFilter
fgets
_exit
wcslen
clock
_cexit
clearerr
__setusermatherr
atoi
mbstowcs
islower
wcstoul
wcstod
__getmainargs

Exports

Exports

?SetSystem@@YG_NIPAGDPAM<V

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

Imports

comdlg32

gdi32

comctl32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.data Size: 121KB - Virtual size: 201KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 65KB

.data
Size: 121KB - Virtual size: 201KB

.reloc
Size: 2KB - Virtual size: 1KB