3a0b8a9b6d988b39a8478359507b37a3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3a0b8a9b6d988b39a8478359507b37a3_JaffaCakes118
Size

213KB
MD5

3a0b8a9b6d988b39a8478359507b37a3
SHA1

f6e7142c595c723f2d374f1bc65c75a2247b771c
SHA256

dbe25c3e23728b6dca7b6847f532fef3e677d9aa56e7d4c4c1af2184d64f0027
SHA512

af32c7005210a85fa0833386c14e3b2a66b48db0a47b4a731fd8d39081fd6a09ab4fc99dc4bd1ef3e617a17438b04579a3dcb14acb173575c127a929cdc6ea05
SSDEEP

6144:P0HlaMaquWzUcxnRVt7cW9qK1cSxNJzODk:PB9dWQcnRVaSc8NJ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a0b8a9b6d988b39a8478359507b37a3_JaffaCakes118

Files

3a0b8a9b6d988b39a8478359507b37a3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bd462b6f0167f5e2a2326be9eceda6b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCaretPos
DrawAnimatedRects
GetMonitorInfoW
GetSysColorBrush
SetTimer
RemoveMenu
FindWindowExA
DestroyCaret
IsDialogMessageW
BeginDeferWindowPos
GetAsyncKeyState
HiliteMenuItem
GetDCEx
CreateDialogParamW
IsMenu
UnionRect
DialogBoxParamA
GetWindowLongA
CharNextExA
MapVirtualKeyA
InsertMenuW
LoadMenuA
InvalidateRect
DrawTextA
PostThreadMessageA
RegisterWindowMessageA
PeekMessageW
GetScrollInfo
DrawStateA
SystemParametersInfoW
VkKeyScanW
GetWindowDC
DispatchMessageW
AppendMenuA
GetShellWindow
CopyAcceleratorTableW
GetClientRect
CreateDialogParamA
ScrollWindow
ChildWindowFromPointEx
IsDlgButtonChecked
CreateWindowExW
GetClassInfoExW
EnableWindow
MoveWindow
GetMessageA
ChangeMenuW
IsWindowVisible
LoadAcceleratorsW
GetCursorPos
ReplyMessage
WaitForInputIdle
GetWindow
DestroyAcceleratorTable
AttachThreadInput
CharToOemW
LoadAcceleratorsA
SendDlgItemMessageA
ModifyMenuW
CallWindowProcA
InvertRect
GetWindowPlacement
InvalidateRgn
InSendMessage
ScrollWindowEx
GetDesktopWindow
GetWindowRect
CascadeWindows
CallWindowProcW
GetWindowLongW
RegisterClassExW
MonitorFromPoint
DefWindowProcW
MapVirtualKeyW
GetParent
CharUpperBuffW
EnableScrollBar
CreateDialogIndirectParamW
SendMessageTimeoutA
CharToOemBuffA
SendMessageTimeoutW
OpenInputDesktop
CreatePopupMenu
UpdateWindow
LoadImageA
ClientToScreen
GetClassLongA
RegisterClassW
GetDlgItemInt
CreateWindowExA
GetActiveWindow
InSendMessageEx
IsChild
DeferWindowPos
CharNextA
LoadImageW
SetWindowTextW
SendInput
CharLowerA
IsCharAlphaW
FindWindowA
LoadMenuW
ShowCursor
DefFrameProcW
CharPrevW
CharLowerW
GetCaretPos
LookupIconIdFromDirectory
IsRectEmpty
SetWindowTextA
CharUpperW
SetRectEmpty
DialogBoxIndirectParamA

msvcrt

wcscat
ftell
vswprintf
wcscpy
mbtowc
iswprint
_controlfp
isprint
strcspn
wcsrchr
__set_app_type
wcstol
__p__fmode
strstr
__p__commode
getenv
iswxdigit
_amsg_exit
iswctype
mbstowcs
strncmp
wcscoll
_initterm
tolower
wcscspn
towupper
printf
strcpy
_ismbblead
wcspbrk
realloc
sprintf
_XcptFilter
_exit
qsort
swscanf
wcstod
free
_cexit
wcscmp
__setusermatherr
strtoul
__getmainargs
gmtime

kernel32

GetTempFileNameW
GetVersionExA
GetFullPathNameW
GetUserDefaultLangID
TryEnterCriticalSection
LCMapStringA
HeapReAlloc
lstrcmpiA
GetCurrentProcessId
FoldStringW
TlsGetValue
GetFileAttributesExW
IsValidLanguageGroup
LoadResource
IsBadReadPtr
FlushViewOfFile
CreateFileA
GetModuleHandleW
GetSystemTimeAdjustment
AddConsoleAliasA
SetThreadPriority
PulseEvent
GetCurrentThread
SystemTimeToFileTime
CreateMutexW
LocalUnlock
CreateSemaphoreA
lstrcmpW
FindCloseChangeNotification
LockFile
GetSystemDirectoryW
FileTimeToSystemTime
SetCommBreak
lstrcpynW
ReleaseSemaphore
FreeLibrary
GetDateFormatW
GetTempPathW
GetThreadLocale
VerSetConditionMask
AddAtomA
LoadLibraryW
SetCommMask
ClearCommError
GetUserDefaultLCID
LocalAlloc
VirtualProtect
GetSystemInfo
WideCharToMultiByte
SetLastError
DeleteFileW
RegisterWaitForSingleObject
LocalLock
LoadLibraryA

gdi32

SetViewportOrgEx
RectInRegion
CreateFontIndirectA
DeleteDC
TextOutA
GetObjectW
CreateFontA
SetPixel
DeleteObject
GetPixel
SetDIBitsToDevice
GetFontData
SetBrushOrgEx
SelectClipRgn
ModifyWorldTransform
RoundRect
Polyline
RealizePalette
SetBitmapDimensionEx
EnumFontFamiliesW
CreateICW
SelectObject
TextOutW
GetStockObject
SetMapMode
DPtoLP
GetTextExtentPoint32A
EndDoc
SetDIBColorTable
CreateRoundRectRgn
ExtFloodFill
LineDDA
AddFontResourceW
IntersectClipRect
SetWindowExtEx
GetObjectA
StartDocW
ExtTextOutA
UnrealizeObject
Escape
TranslateCharsetInfo
GetCharWidth32W
CreateDIBSection
GetTextMetricsA
SetBkMode
GetPaletteEntries
FillRgn
PatBlt

Exports

Exports

?ValidateProcess@@YGHH<V

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd462b6f0167f5e2a2326be9eceda6b9

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

gdi32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 87KB

.data Size: 121KB - Virtual size: 182KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 88KB - Virtual size: 87KB

.data
Size: 121KB - Virtual size: 182KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB