5c75adf3446c4b2bf87e27134210573a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5c75adf3446c4b2bf87e27134210573a_JaffaCakes118
Size

96KB
MD5

5c75adf3446c4b2bf87e27134210573a
SHA1

3544124ed5b7372d58c3c6dc4f20efdfdde0615c
SHA256

148843d178f2429f25d302bedc3396dcc0119b7b223ee932563797c84bddc5d3
SHA512

374ece176e05b3146115af18aadbf198355962436dfaa6df217bac65151b9e28ee7211ec9ab84b816dd9b800bb1131c9e85f597189e3f9436b4858bee47dd2c8
SSDEEP

1536:8T49TMYfhoku+bEPr0Y/JdQtPkhR9Sd5OCB+lgetpYhDIe:S49TMgotyeJdQVkhEHB+lltpYtIe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c75adf3446c4b2bf87e27134210573a_JaffaCakes118

Files

5c75adf3446c4b2bf87e27134210573a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
calloc
floor
wcschr
towlower
__set_app_type
strchr
__p__fmode
qsort
iswxdigit
iswalpha
__p__commode
wcsncmp
free
towupper
fputs
getenv
clock
swprintf
putchar
puts
mbtowc
iswspace
tolower
_amsg_exit
printf
_initterm
_ismbblead
_XcptFilter
strncmp
remove
strtol
wcslen
_exit
_cexit
isspace
strcpy
__setusermatherr
strncpy
iswdigit
iswctype
malloc
__getmainargs
swscanf

user32

GetMenuItemInfoW
GetLastActivePopup
FindWindowExA
HideCaret
GetUserObjectInformationW
EqualRect
TranslateAcceleratorW
ChildWindowFromPoint
TileWindows
LoadMenuA
EnableScrollBar
GetMenuItemCount
FindWindowA
MessageBoxExW
InSendMessage
MonitorFromPoint
GetWindow
ShowScrollBar
LoadImageA
DialogBoxIndirectParamA
MapVirtualKeyA
RemovePropW
GetUpdateRgn
RegisterClassA
SetDlgItemTextA
DrawMenuBar
GetMenu
PostMessageW
GetDlgCtrlID
VkKeyScanW
GetIconInfo
MapWindowPoints
CharNextW
SendMessageTimeoutA
CharLowerBuffW
GetWindowLongW
WaitForInputIdle
MapVirtualKeyExW
CheckRadioButton
AllowSetForegroundWindow
MessageBoxA
GetMessageA
SetMenuDefaultItem
MessageBoxW
GetMenuStringW
LoadMenuW
GetSystemMetrics
SendMessageA
GetMenuState
DrawIcon
DestroyCursor
AdjustWindowRect
GetSysColor
HiliteMenuItem
AppendMenuW
CheckMenuRadioItem
LoadStringW
ScrollWindow
CharPrevW
SetSysColors
GetDlgItem
SetMenuItemBitmaps
GetDesktopWindow
GetParent
EndTask
CreateMenu
GetCaretPos
SendMessageW
InsertMenuItemW
CreatePopupMenu
GetMonitorInfoW
MapVirtualKeyW
FrameRect
EnableMenuItem
UnloadKeyboardLayout
WindowFromPoint
DrawAnimatedRects
ScrollWindowEx
SetRect
SetDlgItemInt
BeginPaint
CreateIconIndirect
SetMenuItemInfoW
SetScrollInfo
CharToOemA
SendNotifyMessageW
GetClassNameW
TranslateAcceleratorA
ShowCursor
SetWindowTextA
CharLowerA
InsertMenuW
AppendMenuA
GetWindowDC
SetRectEmpty
GetSysColorBrush
ShowWindow
ChangeMenuW
OemToCharA
IsCharAlphaW
SystemParametersInfoW
RegisterClassW
ShowWindowAsync
wsprintfA
SetWindowLongW
SwitchToThisWindow
wsprintfW
IsDialogMessageA
GetKeyboardType
EnumChildWindows

gdi32

CreateRectRgnIndirect
CreateBrushIndirect
PtVisible
SelectPalette
CreateDIBitmap
ResizePalette
MoveToEx
CreateFontIndirectA
Ellipse
DeleteDC
ExtTextOutW
CreateBitmap
RectVisible
Escape
SetDIBColorTable
OffsetViewportOrgEx
GetBitmapBits
DeleteObject
CreateHatchBrush
CreatePolygonRgn
CombineRgn
SetBitmapBits
PolyBezier
SetAbortProc
OffsetRgn
WidenPath
CreateSolidBrush
GetTextMetricsA
GetPaletteEntries
CreateICW
SelectClipRgn
SetBitmapDimensionEx
SetBrushOrgEx
SelectObject
GetTextExtentPoint32A
FillRgn
CreateEllipticRgnIndirect
GetPixel
GetStockObject
GetCurrentObject
GetROP2
CreateRectRgn
StartDocW
BitBlt
BeginPath
RealizePalette

kernel32

FindFirstFileW
LeaveCriticalSection
DeleteFileA
InitializeCriticalSection
CallNamedPipeW
SetErrorMode
GetTempFileNameA
CreateWaitableTimerW
FindFirstFileA
HeapLock
RemoveDirectoryW
CreateFileMappingW
LocalSize
GetShortPathNameA
GetModuleHandleW
WriteFile
GlobalSize
CreateSemaphoreW
GetFileAttributesExW
ResetEvent
SleepEx
lstrcpynW
CreateEventA
GetSystemDirectoryW
VerSetConditionMask
LoadLibraryExW
TlsGetValue
IsBadReadPtr
GetShortPathNameW
GetUserDefaultLangID
LocalLock
ConvertDefaultLocale
GetLocaleInfoA
CreateMutexW
SetFileApisToOEM
EscapeCommFunction
SetThreadContext
MoveFileExA
GetThreadLocale
UnlockFile
AddAtomW
GetSystemTimeAdjustment
WaitForMultipleObjects
GetTempPathA
GetFileSize
lstrcmpiW
GlobalFree
CreateFileMappingA
OpenFile

comdlg32

PrintDlgExW
PageSetupDlgW
ChooseColorW
GetFileTitleW
GetSaveFileNameA

shlwapi

PathFileExistsA

Exports

Exports

?HideKeyboardNew@@YGXD<V

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

Imports

msvcrt

user32

gdi32

kernel32

comdlg32

shlwapi

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 71KB

.data Size: 134KB - Virtual size: 195KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 71KB - Virtual size: 71KB

.data
Size: 134KB - Virtual size: 195KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB