62f8023928bfb8d410cf4f8d2de37d05_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

62f8023928bfb8d410cf4f8d2de37d05_JaffaCakes118
Size

195KB
MD5

62f8023928bfb8d410cf4f8d2de37d05
SHA1

1695f46bb7684371af52cce5211d103a76053554
SHA256

07a3abe256e94d7185ab9239e60c3e7ea24a95ee9f8727e8f2a86aad9ef2d249
SHA512

a4d48f65217ba50706693da20d2763445cbff7b764a91d9e91c3441c411a535d9dc814f5a8d8c78bc4ffba645b571478d23b7e04bea3745546b5089f0c1a3966
SSDEEP

6144:uZTLdW4/eArvSJSz2gyvJ81XKC3oAkP5HCa5z/O:eXg4/eArKJRv+kPZCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62f8023928bfb8d410cf4f8d2de37d05_JaffaCakes118

Files

62f8023928bfb8d410cf4f8d2de37d05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50a11d352b9db43670276ba4736ff19c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strlen
strcpy
strstr
tolower
sprintf
memcpy
fclose
fopen
fseek
strcat
strcmp
strncmp
fprintf
exit
bsearch
_stricmp
vsprintf
qsort
strchr
getenv
memmove
printf
sscanf
feof
fgets
time
ctime
toupper
fwrite
fflush
_open_osfhandle
_fdopen
setvbuf
_fileno
_isatty
system
malloc
strncpy
_getcwd
vfwprintf
vfprintf
_vsnwprintf
memchr
_wcsicmp
wcsncmp
_wcsnicmp
_strnicmp
wcsncpy
strncat
_CIpow
_CIacos
_CIasin
_CIatan
_CIcos
_CIlog
_CIlog10
floor
_CIsin
ceil
_CIsqrt
_CItan
localtime
mktime
swscanf
atof
_wcsdup
free
_strdup

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
GetModuleFileNameA
GetTickCount
GetCurrentThreadId
HeapFree
HeapAlloc
GetCurrentProcessId
FreeLibrary
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
SetLastError
GetLastError
CreateFileW
CreateFileA
CloseHandle
SuspendThread
ResumeThread
GetCurrentProcess
GetCurrentThread
DuplicateHandle
DeleteCriticalSection
OpenMutexA
SetEnvironmentVariableA
WaitForSingleObject
TerminateThread
CreateThread
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
AllocConsole
SetConsoleTitleA
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
GetFileSize
ReadFile
FindFirstFileA
FindNextFileA
FindClose
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
WriteFile
PeekNamedPipe
OpenProcess
GetFileAttributesA
GetLocalTime

comctl32

InitCommonControls
InitCommonControlsEx

user32

SetFocus
GetCursorPos
ScreenToClient
ChildWindowFromPoint
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
RedrawWindow
UpdateWindow
SetWindowTextA
MessageBoxIndirectA
ReleaseDC
GetSysColor
SetClassLongA
GetWindowLongA
SetWindowLongA
SendMessageA
GetSysColorBrush
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
SetMenu
DestroyMenu
IsWindow
EnableMenuItem
GetIconInfo
DrawIconEx
SystemParametersInfoA
DrawTextA
GetPropA
GetMenu
GetMenuItemCount
GetMenuItemInfoA
ModifyMenuA
SetMenuItemInfoA
FillRect
FrameRect
CallWindowProcA
SetPropA
CreateMenu
AppendMenuA
CreatePopupMenu
DestroyIcon
CreateIconFromResourceEx
CreateIconFromResource
GetPropW
GetWindowTextA
DestroyWindow
GetWindowTextLengthA
CreateWindowExA
GetWindowRect
SetWindowPos
InvalidateRect
ReleaseCapture
BeginPaint
DrawStateA
EndPaint
SetCapture
GetSystemMetrics
GetWindow
PostMessageA
GetWindowLongW
CallWindowProcW
RemovePropW
SetWindowLongW
DefWindowProcW
SetPropW
SendMessageW
GetParent
RemovePropA
DefWindowProcA
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
CreateAcceleratorTableA
MsgWaitForMultipleObjects
GetMessageA
GetActiveWindow
TranslateAcceleratorA
RegisterClassA
AdjustWindowRect
ShowWindow
GetClientRect
SetCursorPos
LoadImageA
SetCursor
MapWindowPoints
MoveWindow
GetKeyState
GetFocus
IsChild
GetClassNameA
EnumChildWindows
DefFrameProcA
PostThreadMessageA

gdi32

CreateSolidBrush
DeleteObject
CreatePen
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
GetPixel
SetPixel
DeleteDC
SetBkMode
CreateFontIndirectA
GetTextExtentPoint32A
CreateCompatibleBitmap
GetStockObject
SetBkColor
SetTextColor
MoveToEx
LineTo
GetObjectType
CreateDCA
GetDIBits
SetDIBits
CreateDIBSection

ole32

CoInitialize
RevokeDragDrop

Sections

.code
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50a11d352b9db43670276ba4736ff19c

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

ole32

Sections

.code Size: 22KB - Virtual size: 22KB

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 27KB - Virtual size: 126KB

.rsrc Size: 5KB - Virtual size: 5KB

.code
Size: 22KB - Virtual size: 22KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 27KB - Virtual size: 126KB

.rsrc
Size: 5KB - Virtual size: 5KB