6f610a0b47a7dce0d6d243c863d20be4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f610a0b47a7dce0d6d243c863d20be4_JaffaCakes118
Size

190KB
MD5

6f610a0b47a7dce0d6d243c863d20be4
SHA1

a763f872f4391de235d0c56cd87b824f89ff1db9
SHA256

9b16400d555432868274261f5e1df01454347d6fe9041fd1d966468abb6072de
SHA512

0f6ad24a2a215d075260e5c23243ef13e7992b8e7d8f8aee25d741109dfad9289b38fb9c262e30c0d32a529ca7cea0e3b273c3c369f0175c3ca9a9bc70312786
SSDEEP

3072:n+iG8qH8heDIeEVRGJSz3kIw7b1UpSJh/QMmRDcJStI1SFERyj9G008f2kBtKqMN:WmheDxEVRGszwv1Usg7V3+Ryj9G0LKD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f610a0b47a7dce0d6d243c863d20be4_JaffaCakes118

Files

6f610a0b47a7dce0d6d243c863d20be4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
ChooseColorW
ReplaceTextW
GetSaveFileNameW

gdi32

GetROP2
TextOutA
ResizePalette
LPtoDP
SetLayout
CreateRectRgnIndirect
CreateHatchBrush
LineDDA
SetBitmapBits
GetPaletteEntries
CreateFontA
WidenPath
SelectPalette
SetPaletteEntries
SetBkColor
EndPage
Polyline
GetBkMode
GetRgnBox
CreatePalette
RemoveFontResourceW
IntersectClipRect
GetBitmapBits
SetMapMode
AddFontResourceW
GetTextAlign
SetDIBColorTable
CreateBitmapIndirect
CreateSolidBrush
GetTextExtentPointW
PtInRegion
GetNearestColor
Escape
CreatePolygonRgn
SetViewportOrgEx
PolyBezier
StretchDIBits
GetDeviceCaps
SetTextAlign
CombineRgn
GetTextMetricsA
GetTextCharsetInfo
GetSystemPaletteUse
CreateRoundRectRgn
CreateDIBitmap

comctl32

CreatePropertySheetPageA
ImageList_Draw
ImageList_GetIconSize
ImageList_Write
DestroyPropertySheetPage
CreateToolbarEx

kernel32

lstrcpyA
TryEnterCriticalSection
FindResourceA
EnumResourceTypesA
GetLastError
HeapAlloc
GetTempPathW
FindAtomW
SetCommMask
IsDBCSLeadByte
GlobalReAlloc
HeapWalk
SetTimerQueueTimer
WideCharToMultiByte
WaitCommEvent
GetTimeFormatA
HeapReAlloc
FindAtomA
GlobalMemoryStatus
GetStartupInfoW
RtlUnwind
GlobalAlloc
GetCurrentThread
GlobalGetAtomNameW
GetPriorityClass
GetFileAttributesA
GetSystemWindowsDirectoryA
LeaveCriticalSection
GetNumberFormatW
GetCommandLineA
GetComputerNameExW
FoldStringW
GlobalCompact
GetEnvironmentStringsW
MoveFileW
GetCPInfo
CreateRemoteThread
UnlockFile
GlobalAddAtomW
CopyFileA
GetThreadLocale
GetCompressedFileSizeW
FindFirstChangeNotificationW
WaitForMultipleObjectsEx
lstrcatA
GetSystemInfo
GetUserDefaultLangID
FormatMessageW
VirtualLock
ConnectNamedPipe
GetModuleHandleW
GetStringTypeExW
SetCurrentDirectoryW
GetThreadTimes

user32

IsRectEmpty
GetClassLongW
SetMenuItemBitmaps
IntersectRect
GetClassLongA
MessageBoxW
PtInRect
IsChild
InvertRect
GetClientRect
GetMessageW
RegisterClassA
DrawFrameControl
CreateAcceleratorTableW
CheckMenuItem
GetNextDlgGroupItem
UpdateWindow
MapVirtualKeyA
CharNextW
InvalidateRgn
GetAsyncKeyState
LoadCursorA
GetScrollPos
FrameRect
MonitorFromRect
SetParent
FindWindowExA
CopyImage
ScrollWindow
LockWindowUpdate
ScrollWindowEx
UnionRect
GetMenuStringA
GetUpdateRect
GetUserObjectInformationA
TranslateAcceleratorA
DialogBoxParamW
GetClassInfoW
GetMenuCheckMarkDimensions
IsDialogMessageW
GetParent
GetMenuItemCount
GetMenu
SetWindowPos
SetDlgItemTextA
CharLowerA
GetWindowTextA
BeginPaint
CharLowerW
GetSysColorBrush
PostThreadMessageW
DispatchMessageA
GetWindow
InvalidateRect
LoadAcceleratorsW
EnumChildWindows
CreateCursor
ShowWindowAsync
DrawTextA
CreateWindowExW
GetClipCursor
SendMessageW
InsertMenuItemW
GetWindowTextW
OemToCharA
SwitchToThisWindow
GetMenuItemInfoW
CreateWindowExA
CharToOemBuffA
LoadStringW
ReplyMessage
LoadBitmapA
InflateRect
GetActiveWindow
SetCursor
ToUnicodeEx
OpenInputDesktop
DefDlgProcA
CallWindowProcW
OpenDesktopW
EndDialog
SetCaretPos
mouse_event
GetDlgItemInt
GetForegroundWindow
GetClassInfoExA
DefFrameProcA
CharToOemW
RegisterWindowMessageA
LoadIconA
TrackPopupMenuEx
DrawStateW
RegisterClassExA
keybd_event
GetUpdateRgn
SetRectEmpty
DrawMenuBar
SendDlgItemMessageA
ClipCursor
SetForegroundWindow
GetIconInfo
CreateCaret
SetUserObjectInformationW
MonitorFromPoint
SetTimer
SendNotifyMessageW
GetNextDlgTabItem
SetDlgItemTextW
CallWindowProcA

msvcrt

strspn
_controlfp
free
realloc
__set_app_type
mbtowc
__p__fmode
wcsstr
sprintf
__p__commode
strncmp
fprintf
_amsg_exit
gmtime
remove
vswprintf
towupper
wcsrchr
_initterm
_ismbblead
fflush
gets
strpbrk
strtoul
srand
setlocale
exit
strcpy
isalpha
bsearch
_XcptFilter
fgets
_exit
wcslen
clock
_cexit
clearerr
__setusermatherr
atoi
mbstowcs
islower
wcstoul
wcstod
__getmainargs

Exports

Exports

?SetSystem@@YG_NIPAGDPAM<V

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e010315b1b854069decec73d0f269e8

Headers

File Characteristics

Imports

comdlg32

gdi32

comctl32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.data Size: 121KB - Virtual size: 205KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 65KB

.data
Size: 121KB - Virtual size: 205KB

.reloc
Size: 2KB - Virtual size: 1KB