36743f4ec6ca39579b96c4e1a80f07f2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

36743f4ec6ca39579b96c4e1a80f07f2_JaffaCakes118
Size

247KB
MD5

36743f4ec6ca39579b96c4e1a80f07f2
SHA1

f142d2f5d2f7778f595d2ac453254a63bbc71b47
SHA256

d1713483e784549ddc8312c170d3f8f2597845237fab233abf3b6662b33ac5d5
SHA512

46724c697b587db40d07844376400be039675de099dbcde8f57ea7c8ae3639ee86fab6d244bf5408ecd816636fb40acbbdb4db27f377d2a96fa1c0f7bbc8deb1
SSDEEP

6144:mz/2PD//wVEBXk7eR3lMFAukjvoD4PbfTP7kN/MHl1lRKC3tMMztsyP3:mz/u//wVEBXk7K+BkY4PbfTP7kOkMzmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36743f4ec6ca39579b96c4e1a80f07f2_JaffaCakes118

Files

36743f4ec6ca39579b96c4e1a80f07f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4434e552de19389c4f380705d852455

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memmove
atof
strlen
strcpy
strncpy
strcat
memcpy
_stricmp
strcmp
tolower
sprintf
strncmp
fclose
fabs
ceil
malloc
floor
free
localtime
mktime
gmtime
printf
exit
fprintf
bsearch
vsprintf
fopen
fgets
vfwprintf
vfprintf
_vsnwprintf
memchr
_wcsicmp
wcsncmp
_wcsnicmp
_strnicmp
wcsncpy
strchr
getenv
qsort
sscanf
feof
time
ctime
toupper
fwrite
fflush
_open_osfhandle
_fdopen
setvbuf
_fileno
_isatty
system
_getcwd
_CIsqrt
_CIlog
strncat
_CIpow
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_finite
_isnan
_CIlog10
_CIfmod
_CIsin
_CIsinh
_CItan
_CItanh
swscanf
_wcsdup
_strdup

kernel32

GetModuleHandleA
HeapCreate
GetSystemTime
SetLocalTime
HeapDestroy
ExitProcess
SetSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentThreadId
Sleep
HeapFree
TlsGetValue
HeapAlloc
TlsSetValue
TlsAlloc
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
GetPrivateProfileStringA
WritePrivateProfileStringA
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentProcessId
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
PeekNamedPipe
HeapValidate
HeapReAlloc
SetLastError
GetVersionExA
GetCurrentDirectoryA
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
WriteFile
CreateFileA
GetFileSize
SetFilePointer
GetLocalTime
GetLastError
CreateFileW
ReadFile
FindNextFileA
GetTickCount
SuspendThread
ResumeThread
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
OpenMutexA
SetEnvironmentVariableA
TerminateThread
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
AllocConsole
SetConsoleTitleA
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
IsBadReadPtr
OpenProcess
FreeConsole
GetConsoleMode
SetConsoleMode

comctl32

InitCommonControls
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon

user32

SetFocus
SendMessageA
SetWindowLongA
GetSysColorBrush
SetClassLongA
GetParent
GetWindowLongA
GetWindow
RedrawWindow
GetSysColor
GetClassNameA
IsWindow
FillRect
DrawTextA
GetDlgCtrlID
InvalidateRect
CallWindowProcA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
GetPropW
GetPropA
GetWindowTextA
DestroyWindow
SetWindowTextA
GetWindowTextLengthA
CreateWindowExA
SetWindowPos
SetCursor
BeginPaint
GetClientRect
GetCapture
DrawStateA
EndPaint
DefWindowProcA
UpdateWindow
ReleaseCapture
SetCapture
LoadCursorA
ShowWindow
GetWindowRect
ScreenToClient
GetWindowLongW
CallWindowProcW
RemovePropW
SetWindowLongW
DefWindowProcW
SetPropW
SendMessageW
RemovePropA
SetPropA
GetSystemMetrics
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
IsZoomed
IsIconic
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
GetActiveWindow
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassA
AdjustWindowRectEx
CreateAcceleratorTableA
GetMenu
SetCursorPos
LoadImageA
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
PostMessageA
GetCursorPos
GetFocus
IsChild
EnumChildWindows
DefFrameProcA
DrawIconEx
DestroyIcon
PostThreadMessageA

gdi32

DeleteObject
GetStockObject
CreateSolidBrush
SetBkMode
SetTextColor
SetBkColor
SelectObject
CreateRectRgnIndirect
SelectClipRgn
TextOutA
GetTextExtentPoint32A
CreatePen
MoveToEx
LineTo
CreateCompatibleBitmap
CreateDCA
CreateCompatibleDC
DeleteDC
GetObjectA
StretchBlt
GetObjectType
GetDIBits
CreateDIBSection
BitBlt
CreateBitmap
SetPixel

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

winmm

timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeKillEvent
timeSetEvent

shell32

ShellExecuteExA

ole32

CoInitialize
RevokeDragDrop

wsock32

closesocket
WSACleanup
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
ioctlsocket
recv
WSAGetLastError
send
bind
listen
accept
setsockopt

Sections

.code
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4434e552de19389c4f380705d852455

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

comdlg32

advapi32

winmm

shell32

ole32

wsock32

Sections

.code Size: 6KB - Virtual size: 6KB

.text Size: 177KB - Virtual size: 176KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 14KB - Virtual size: 101KB

.rsrc Size: 2KB - Virtual size: 1KB

.code
Size: 6KB - Virtual size: 6KB

.text
Size: 177KB - Virtual size: 176KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 14KB - Virtual size: 101KB

.rsrc
Size: 2KB - Virtual size: 1KB