473ee8b79d33a21559f2214ae9d172d7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

473ee8b79d33a21559f2214ae9d172d7_JaffaCakes118
Size

206KB
MD5

473ee8b79d33a21559f2214ae9d172d7
SHA1

0133bd55c48d38ef2b87fdabc5d3efe8fa0dd835
SHA256

be7d5269c9b38116fd8b0768a5e9350043431d1185759ef6caa8c68a5ac28f01
SHA512

47653593fa600253afa017c9540e11361617db8fadf424fbecab339b0e5664013ac1febfb58472b6925a2ac18ba2880ca92b6d1acaf7ac7c3e936d51eadc2d79
SSDEEP

6144:kD1t3aF0UPAgaHyQaWnIqR9FduKF66SXPW2:Wjqz7aHzjnZRN66y3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
473ee8b79d33a21559f2214ae9d172d7_JaffaCakes118

Files

473ee8b79d33a21559f2214ae9d172d7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6adc48a3c8906a24a182b661a583b30d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetRectEmpty
CallWindowProcA
DestroyCursor
GetAsyncKeyState
SwitchToThisWindow
ShowWindow
UnionRect
IsCharAlphaW
IsWindowEnabled
DialogBoxIndirectParamA
DispatchMessageW
FindWindowA
CreateDialogParamW
GetMessageExtraInfo
GetWindowRect
GetCaretPos
CallWindowProcW
CharPrevW
IsZoomed
wvsprintfA
DispatchMessageA
MoveWindow
GetMenuItemRect
TrackPopupMenuEx
RegisterWindowMessageW
DrawStateA
InvalidateRect
SendMessageTimeoutA
SetPropW
RemoveMenu
LoadAcceleratorsW
ScrollWindow
GetWindowLongA
EnableWindow
MonitorFromPoint
ChildWindowFromPointEx
ModifyMenuW
LoadImageA
CascadeWindows
GetActiveWindow
LookupIconIdFromDirectory
CharToOemBuffA
PeekMessageW
ShowCursor
GetSystemMetrics
GetDlgItemInt
SendDlgItemMessageA
BeginPaint
GetClassInfoExW
DestroyAcceleratorTable
GetWindowPlacement
DestroyCaret
CreateDialogParamA
SendInput
LoadImageW
AttachThreadInput
LoadStringW
GetWindow
GetForegroundWindow
ScrollWindowEx
DeferWindowPos
DefWindowProcW
RemovePropW
CheckMenuItem
AppendMenuA
GetWindowLongW
GetFocus
UpdateWindow
BeginDeferWindowPos
CreatePopupMenu
MapVirtualKeyExW
SetTimer
CreateWindowExW
DrawFrameControl
CopyAcceleratorTableW
GetLastActivePopup
CharLowerW
GetCursorPos
SetCaretPos
SetParent
ClientToScreen
DefWindowProcA
CharUpperBuffW
IsChild
GetSubMenu
TileWindows
LoadMenuA
GetShellWindow
LoadCursorA
ReplyMessage
GetDesktopWindow
RedrawWindow
GetMessageTime
WaitForInputIdle
GetClientRect
GetDCEx
RegisterClassExW
wsprintfA
IsDialogMessageW
EnumThreadWindows
CharPrevA
CreateWindowExA
ChangeMenuW
DrawStateW
PostThreadMessageA
CharNextA
SetMenuDefaultItem
GetMenuStringW
RegisterClassW
TranslateAcceleratorW
DrawEdge

msvcrt

strtoul
clearerr
_controlfp
remove
fseek
__set_app_type
localtime
atoi
perror
strncmp
strrchr
wcscspn
putc
__p__fmode
wcscmp
__p__commode
tolower
_amsg_exit
fgetc
_initterm
wcstombs
wcscoll
_ismbblead
isxdigit
fgets
_XcptFilter
putchar
iswalpha
strpbrk
realloc
_exit
fputc
_cexit
free
strcpy
__setusermatherr
isalnum
toupper
islower
strtok
sscanf
wcslen
__getmainargs
vswprintf

gdi32

GetRgnBox
Escape
GetTextExtentPointA
StretchDIBits
CreateFontW
GetPaletteEntries
GetLayout
CreateHalftonePalette
Polyline
CreateDCW
SetViewportExtEx
CreateBitmapIndirect
GetTextCharsetInfo
CreateBrushIndirect
ResizePalette
SetRectRgn
RectVisible
GetPixel
SelectPalette
GetROP2
SetBkMode
CreateRectRgnIndirect
SetStretchBltMode
GetNearestPaletteIndex
SetDIBColorTable
GetTextExtentPointW
SetWindowOrgEx
EndPath
LineTo
Ellipse
CreatePolygonRgn
AddFontResourceA
DeleteDC
OffsetViewportOrgEx
LineDDA
SetDIBitsToDevice
CreateCompatibleDC
GetDIBits
FillRgn
ExtFloodFill
SetTextColor
CreateFontIndirectW
PatBlt
SelectClipRgn
CreatePalette
GetObjectW
CreateDIBitmap
TranslateCharsetInfo

kernel32

MultiByteToWideChar
FreeLibrary
Sleep
GetUserDefaultUILanguage
CreateWaitableTimerW
MoveFileA
SetFileTime
CreateRemoteThread
CreateNamedPipeW
VerifyVersionInfoW
DeleteAtom
OpenFile
CreateSemaphoreW
GetCommModemStatus
IsDBCSLeadByteEx
ReleaseSemaphore
IsBadCodePtr
lstrcmpW
SetSystemTime
AddAtomA
FormatMessageA
GlobalAddAtomA
CompareStringA
SetFilePointer
GetSystemWindowsDirectoryA
GlobalMemoryStatus
GetWindowsDirectoryW
CreateDirectoryW
FindNextChangeNotification
ConnectNamedPipe
GetUserDefaultLangID
TerminateThread
LoadLibraryExA
GetOEMCP
QueryDosDeviceW
GetStdHandle
EnumSystemLocalesA
HeapValidate
SizeofResource
GetExitCodeThread
SuspendThread
PulseEvent
GetEnvironmentStrings
IsBadReadPtr
FindFirstChangeNotificationW
FindNextFileW
TlsSetValue
GetCommConfig
lstrcmpiA
RemoveDirectoryA
GlobalGetAtomNameA
FreeResource

Exports

Exports

?Header@@YGPAXKPAEFF<V

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6adc48a3c8906a24a182b661a583b30d

Headers

File Characteristics

Imports

user32

msvcrt

gdi32

kernel32

Exports

Exports

Sections

.text Size: 82KB - Virtual size: 81KB

.data Size: 121KB - Virtual size: 188KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 82KB - Virtual size: 81KB

.data
Size: 121KB - Virtual size: 188KB

.reloc
Size: 2KB - Virtual size: 1KB