71825fc2589dc76f4f6bf0d491101b40_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

71825fc2589dc76f4f6bf0d491101b40_JaffaCakes118
Size

1.2MB
MD5

71825fc2589dc76f4f6bf0d491101b40
SHA1

766ff6d1196ae15ff720136399d446e65ed4d4e4
SHA256

f1b7e2ab52e6785d1cde89a19e2a627f01b467e8e1052c11b73fb4be3ffdee03
SHA512

14602e8f2f2631bfba75138a4c1229f367c93e690cc5c7cd638e84561d89b4195b079116db79720ed97bef91717de8d3221b684f4c55a135052ddfcd25f0da43
SSDEEP

12288:wCZiCPyV/Lu77zkk2IDFG4ACLZL9Fh6LtNkjOQbbXHwM/b25QGE3zJUuEZZf5nY9:wCsCPKKXv/bGQGE3FUTf32suLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71825fc2589dc76f4f6bf0d491101b40_JaffaCakes118

Files

71825fc2589dc76f4f6bf0d491101b40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5320abe209f936fefcb45ac7c07c2f45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
GetVersion
ExitProcess
GetACP
GetExitCodeProcess
WaitForSingleObject
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateProcessA
CreateDirectoryA
SetConsoleTitleA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
VirtualAlloc
VirtualFree
AllocConsole
GetLocalTime
GetUserDefaultLangID
GetProcAddress
ReadFile
SetEndOfFile
SetLocalTime
WritePrivateProfileStringA
RemoveDirectoryA
FindClose
GetVolumeInformationA
GetLogicalDrives
FindFirstFileA
CopyFileA
MoveFileA
GlobalFree
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetDriveTypeA
QueryPerformanceCounter
QueryPerformanceFrequency
FindNextFileA
GetPrivateProfileStringA
FindResourceA
GetModuleFileNameA
GetCommandLineA
LockResource
SizeofResource
LoadResource
FreeLibrary
LoadLibraryA
SetFilePointer
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileSize
GetDiskFreeSpaceA
GetStdHandle
MultiByteToWideChar
lstrlenW
CloseHandle
CompareStringA
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
SetVolumeLabelA
GetFullPathNameA
FreeConsole
WideCharToMultiByte
DeleteFileA
WriteFile
CreateFileA
lstrlenA
RaiseException

user32

FillRect
GetCursorPos
PostQuitMessage
DefWindowProcA
MessageBoxA
UpdateWindow
DrawTextA
InvalidateRect
EnableWindow
SetScrollInfo
DestroyWindow
CharToOemBuffA
OemToCharBuffA
IsIconic
EndPaint
BeginPaint
SetKeyboardState
GetKeyboardState
PeekMessageA
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
KillTimer
SetTimer
SetWindowPlacement
GetWindowPlacement
SetCursor
SetCursorPos
SendMessageA
GetClientRect
EnumDisplaySettingsA
GetSysColor
SetScrollPos
LoadCursorA
RegisterClassA
CreateWindowExA
SetWindowLongA
ShowWindow
GetClassNameA
GetWindowRect
SystemParametersInfoA
SetWindowPos
SetForegroundWindow
GetForegroundWindow
GetSystemMetrics
LoadKeyboardLayoutA
GetDC
ReleaseDC
GetDlgItem
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
CharLowerA
CharUpperA
CreateCursor
DestroyIcon
DestroyCursor
IsWindow
GetWindow
GetWindowLongA
RegisterWindowMessageA
ScreenToClient
GetKeyState
GetAsyncKeyState
ClientToScreen
MoveWindow
LoadIconA
IsZoomed
ShowCursor
EndDialog
DialogBoxParamA
SetFocus
GetFocus
AdjustWindowRectEx
ChangeDisplaySettingsA

gdi32

RealizePalette
DeleteObject
GetDeviceCaps
CreatePalette
CreateSolidBrush
SetBkColor
SetTextColor
StretchDIBits
SelectPalette
CreateFontA
DeleteDC
SetStretchBltMode
TextOutA
GetTextExtentPoint32A
GetDIBits
CreateCompatibleDC
CreateBitmap
SelectObject
CreateCompatibleBitmap
CreateDCA
BitBlt
EndPage
StartPage
EndDoc
EnumFontFamiliesA
StartDocA
GetStockObject

msacm32

acmStreamOpen
acmFormatSuggest
acmStreamClose
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader

winmm

waveOutRestart
waveOutWrite
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
joyGetDevCapsA
mciSendCommandA
waveOutPause
waveOutGetPosition
waveOutOpen
joyGetPos
waveOutClose
timeGetTime

comdlg32

GetSaveFileNameA
FindTextA
GetOpenFileNameA
PrintDlgA

comctl32

ord17
ord6

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

ExtractIconA

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.petprg
Size: 1017KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5320abe209f936fefcb45ac7c07c2f45

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msacm32

winmm

comdlg32

comctl32

advapi32

shell32

Sections

.text Size: 200KB - Virtual size: 199KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 32KB - Virtual size: 31KB

.petprg Size: 1017KB - Virtual size: 1016KB

.text
Size: 200KB - Virtual size: 199KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 32KB - Virtual size: 31KB

.petprg
Size: 1017KB - Virtual size: 1016KB