5c56802b2ec6b64b26a920f17cea2c5a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5c56802b2ec6b64b26a920f17cea2c5a_JaffaCakes118
Size

132KB
MD5

5c56802b2ec6b64b26a920f17cea2c5a
SHA1

172580ed5595a85e33d8857e927009968c1d7f0d
SHA256

422bcbefb3ce050a13fb5c74afbcf4eaa4ff18ffa6481ffc210a03846ea745eb
SHA512

245606ba390edbbf253d7ed0da489ce1d213efc19ae5e288e383f4da01fcab811d3835fde05ad9a65d8bac94b6c6659c0408425d840108a833c42130949c9fb4
SSDEEP

3072:CnMKARPJbz4fhQ02Fdc/2cZ+0G0j9kihOYsv0F:CGVqf/Qc/2+GOt+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c56802b2ec6b64b26a920f17cea2c5a_JaffaCakes118

Files

5c56802b2ec6b64b26a920f17cea2c5a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7b58817f69fd8f0d6d719be3c14983e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
__getmainargs
_exit
localtime
_vsnprintf
_controlfp
_lock
_snwprintf
exit
_initterm
__set_app_type
_acmdln
wcsncmp
__p__fmode
iswctype
??2@YAPAXI@Z
malloc
_cexit
_c_exit
_fileno
__p__commode
wcstoul
_adjust_fdiv
_wtol
wcsncpy
__setusermatherr
time
_wcsicmp
_unlock

kernel32

CompareStringW
GetCommandLineW
LocalLock
FreeEnvironmentStringsW
RtlUnwind
GetStdHandle
lstrcatW
HeapSize
ResumeThread
GetCurrentProcess
InterlockedDecrement
LoadResource
TerminateProcess
CloseHandle
SetFilePointer
FindClose
HeapReAlloc
GetFileInformationByHandle
GetStartupInfoA
GetStartupInfoW
GetSystemInfo
LocalUnlock
FormatMessageA
GetDateFormatW
ExitProcess
GetUserDefaultLCID
LeaveCriticalSection
lstrcmpW
SetEndOfFile
FindFirstFileW
GetCommandLineA
IsDebuggerPresent
Sleep
LoadLibraryExA
UnhandledExceptionFilter
LocalAlloc
GetModuleHandleA
WideCharToMultiByte
LocalSize
MultiByteToWideChar
FoldStringW
QueryPerformanceCounter
GetCurrentThreadId
GetCPInfo
GetFileType
GlobalUnlock
GetStringTypeW
CreateFileMappingW
LocalFree
GetLastError
SetLastError
GetProcAddress
lstrcpyW
EnterCriticalSection
lstrlenW
WriteFile
GetUserDefaultUILanguage
GetFileAttributesW
GetModuleHandleW
SetErrorMode
CreateFileA
GetEnvironmentStringsW
CreateFileW
FormatMessageW
GetACP
LocalReAlloc
GetLocalTime
ExpandEnvironmentStringsA
GetVersionExA
GlobalFree
SetHandleCount
lstrcpynW
ReadFile
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
GetTickCount
GetOEMCP
SetCurrentDirectoryA
CreateProcessA
GetFileSize
FreeEnvironmentStringsA
CreateThread
GetLocaleInfoA
GetSystemTime
OpenMutexA
GetTimeFormatW
VirtualAlloc
FreeLibrary
TerminateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GlobalAlloc
InterlockedIncrement
MulDiv
GetEnvironmentStrings
LoadLibraryA
SetEvent
GetTempFileNameW
GetStringTypeA
FindNextFileW
VirtualProtect
LCMapStringA
DeleteFileW
GetCurrentProcessId
DeleteCriticalSection
lstrcmpiW
GetLocaleInfoW
GlobalLock
MapViewOfFile
HeapDestroy

user32

GetDlgItemTextW
SetWindowPlacement
DestroyWindow
GetActiveWindow
CloseClipboard
IsDialogMessageW
PeekMessageW
DestroyIcon
SendMessageW
SendDlgItemMessageW
LoadCursorW
LoadStringW
ShowWindow
LoadIconW
PostMessageW
GetCursorPos
DispatchMessageW
UnregisterClassA
SetClipboardData
DrawTextExW
SetScrollPos
EnableMenuItem
CreateDialogParamW
CharUpperW
GetParent
SetDlgItemTextW
GetMessageW
GetSystemMenu
SetWinEventHook
UpdateWindow
GetForegroundWindow
EndPaint
GetClientRect
GetMenuState
DefWindowProcW
CharNextW
GetFocus
CheckMenuItem
EndDialog
MessageBeep
EnableWindow
RegisterWindowMessageA
SetCursor
LoadAcceleratorsW
DestroyMenu
GetDesktopWindow
GetSubMenu
GetDlgItem
GetSystemMetrics
RegisterClassExW
RegisterWindowMessageW
SetActiveWindow
OpenClipboard
IsIconic
GetDC
GetSysColorBrush
SetWindowTextW
GetPropA
GetMenu
GetDlgCtrlID
IsClipboardFormatAvailable
WinHelpW
DeleteMenu
PostQuitMessage
MessageBoxW
GetWindowPlacement
ClientToScreen
CharLowerW
ScreenToClient
SetFocus
ChildWindowFromPoint
CreateWindowExW
LoadImageW
TranslateMessage
DialogBoxParamW
GetKeyboardLayout
MoveWindow
wsprintfW
InvalidateRect
SetWindowLongW
GetWindowLongW
ReleaseDC
GetWindowTextW
GetMessagePos
TranslateAcceleratorW
UnhookWinEvent
CheckDlgButton

gdi32

GetTextMetricsW
GetTextExtentPoint32W
DeleteObject
GetObjectW
TextOutW
EndDoc
SetBkMode
StartDocW
CreateDCW
SetMapMode
GetStockObject
SetViewportExtEx
CreateFontIndirectW
LPtoDP
SelectObject
SetWindowExtEx
GetDeviceCaps
StartPage
EnumFontsW
GetTextFaceW
EndPage
SetAbortProc
DeleteDC
AbortDoc

advapi32

RegQueryValueExW
RegSetValueExW
RegQueryValueExA
RegCloseKey
RegCreateKeyW
RegOpenKeyExA
IsTextUnicode

comdlg32

ChooseFontW
PrintDlgExW
GetSaveFileNameW
GetFileTitleW
FindTextW
ReplaceTextW
PageSetupDlgW
CommDlgExtendedError
GetOpenFileNameW

shell32

DragAcceptFiles
ShellAboutW
DragQueryFileW
DragFinish

winspool.drv

GetPrinterDriverW
ClosePrinter
OpenPrinterW

comctl32

CreateStatusWindowW

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b58817f69fd8f0d6d719be3c14983e9

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

comdlg32

shell32

winspool.drv

comctl32

Sections

.text Size: 102KB - Virtual size: 102KB

.data Size: 25KB - Virtual size: 118KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 102KB - Virtual size: 102KB

.data
Size: 25KB - Virtual size: 118KB

.rsrc
Size: 3KB - Virtual size: 3KB