741a4fac513a6aa678c5eec5b1b9aca4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

741a4fac513a6aa678c5eec5b1b9aca4_JaffaCakes118
Size

1.6MB
MD5

741a4fac513a6aa678c5eec5b1b9aca4
SHA1

86760f7de709985bf859d62db57d0387303e364c
SHA256

a5cccf4b2f71be34ec2e03f5e48f098fe9a6eb148239fdb6901adc00ca51e416
SHA512

14fa036f23b6f096c70b30c0148146fac327515490713dff18231b8a5020eab2c50a22bdb1d0190369f2d7f494db31af942f28d5ea75a99332ec5554d4934643
SSDEEP

24576:B4p+GeSdQlWbRLPpWyij9qTEuuY8ibjLCQzoOLBvLeFcl84p5zvYbXId7I6g:BeeKDiMTkuolFcl84p9MXI9u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
741a4fac513a6aa678c5eec5b1b9aca4_JaffaCakes118

Files

741a4fac513a6aa678c5eec5b1b9aca4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f63940e25f6f0df76265fbbb0e8ef837

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrCmpIW
PathIsNetworkPathW
PathStripPathA
PathAddBackslashA
PathFindFileNameA
PathFileExistsA
PathAddBackslashW
PathCommonPrefixW
StrCmpNW
PathRemoveBackslashW
PathRemoveBackslashA
PathCombineW
PathCombineA
PathFileExistsW
PathRemoveBlanksA
PathRemoveBlanksW
PathIsFileSpecA
PathAppendW
PathFindFileNameW
PathFindExtensionW
PathStripPathW
PathRemoveFileSpecW
StrToIntW
StrCmpNIW
StrToIntExW
PathIsSameRootW
StrChrW
PathIsUNCW
PathIsURLW
PathAppendA
PathRemoveFileSpecA

kernel32

GetTempPathA
lstrcpyA
FindClose
GetPrivateProfileStructA
WritePrivateProfileStructA
FindFirstFileA
LoadLibraryA
FreeLibrary
FindNextFileA
WriteFile
CreateFileA
SetThreadPriority
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
lstrcatA
GlobalLock
GlobalUnlock
GetEnvironmentVariableA
SetPriorityClass
GetCurrentProcess
SetEvent
CreateEventA
GetLastError
RemoveDirectoryA
GetVersion
MulDiv
lstrcmpA
SystemTimeToFileTime
GetStringTypeExA
GetSystemTime
SetFilePointer
GetFileSize
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
LocalAlloc
LocalFree
SetEndOfFile
ReadFile
MoveFileA
GetCurrentThread
ResetEvent
WaitForMultipleObjects
LoadLibraryExA
GetCommandLineW
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
GetLogicalDrives
GetDriveTypeA
GetShortPathNameA
GetLocaleInfoA
InterlockedIncrement
GetACP
QueryPerformanceCounter
GetCurrentDirectoryA
CompareStringA
InterlockedExchange
GetWindowsDirectoryA
GetSystemDirectoryA
SetLastError
GetStartupInfoA
RaiseException
HeapAlloc
GetProcessHeap
GetLocalTime
LoadResource
FindResourceA
LockResource
GlobalAlloc
GlobalFree
GetModuleFileNameA
Sleep
CreateThread
WaitForSingleObject
CloseHandle
GetTickCount
OpenEventA
ExitProcess
lstrlenA
OpenProcess
TerminateProcess
lstrcpynA
GetPrivateProfileIntA
GetSystemTimeAsFileTime
CreateProcessA
CreateDirectoryA
SetCurrentDirectoryA
lstrcmpiA
GetTempFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetEnvironmentVariableA

user32

wsprintfA
DialogBoxParamA
InsertMenuItemA
GetMenuItemID
GetSubMenu
LoadMenuA
GetMenuItemRect
GetMenuState
GetMenuItemInfoA
GetMenuStringA
IsCharAlphaA
WindowFromPoint
RegisterClipboardFormatA
CreatePopupMenu
AppendMenuA
GetMenuItemCount
RemoveMenu
SystemParametersInfoA
InsertMenuA
DestroyMenu
SetMenuItemInfoA
ModifyMenuA
CheckMenuItem
PeekMessageA
CharNextA
CharPrevA
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
SetWindowRgn
DestroyCursor
DestroyIcon
TranslateAcceleratorA
LoadStringA
SetFocus
IsIconic
BringWindowToTop
CreateDialogIndirectParamA
GetKeyState
InflateRect
MessageBeep
SetRect
FillRect
BeginPaint
EndPaint
GetCapture
LoadAcceleratorsA
GetWindowRgn
CopyRect
EnumDisplaySettingsA
GetMessageA
GetForegroundWindow
DispatchMessageA
GetSystemMetrics
SetTimer
KillTimer
IsWindow
RegisterClassA
GetClassInfoA
IsWindowVisible
CreateWindowExA
DefWindowProcA
LoadCursorA
SetCursor
IsChild
SetCapture
ReleaseCapture
TrackPopupMenu
GetCursorPos
ClientToScreen
IsDlgButtonChecked
CheckDlgButton
FindWindowA
GetWindowThreadProcessId
MessageBoxA
FindWindowExA
SetParent
PostMessageA
SetWindowTextA
GetWindowTextA
GetParent
EndDialog
SetDlgItemTextA
GetDC
LoadImageA
ReleaseDC
GetWindowDC
GetClientRect
GetAsyncKeyState
SendDlgItemMessageA
DrawTextA
GetDlgItemTextA
InvalidateRect
SetWindowPos
ScreenToClient
GetDlgItem
GetWindowRect
CreateDialogParamA
DestroyWindow
SendMessageA
ShowWindow
SetForegroundWindow
GetClassLongA
TranslateMessage
IsDialogMessageA
ValidateRect
GetFocus
UpdateWindow
DeleteMenu
SetCursorPos
SetDlgItemInt
GetDlgItemInt
DrawIconEx
GetUpdateRect
GetMessagePos
GetSystemMenu
SetClassLongA
PostQuitMessage
LoadIconA
RegisterWindowMessageA
CharUpperBuffA
SendMessageTimeoutA
GetSysColorBrush
EnableMenuItem

gdi32

CreatePalette
CreateDIBSection
SelectPalette
RealizePalette
BitBlt
UpdateColors
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgn
CreatePolyPolygonRgn
CreatePen
CreateFontA
CreateSolidBrush
GetTextColor
GetBkColor
SetBkColor
CreateCompatibleBitmap
DeleteObject
Rectangle
GetStockObject
GetObjectA
CreateRectRgnIndirect
FillRgn
StretchBlt
GetPixel
SetPixel
CreateBrushIndirect
SetStretchBltMode
GetNearestColor
CombineRgn
EnumFontsA
GetTextMetricsA
IntersectClipRect
ExtSelectClipRgn
GetFontLanguageInfo
DeleteDC
GetDIBColorTable
GetDIBits
RectVisible
SelectObject
CreateCompatibleDC
GetDeviceCaps
SetBkMode
SetTextColor
LineTo
RoundRect
MoveToEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA

shell32

SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
DragQueryPoint
SHBrowseForFolderA
DragFinish

ole32

OleUninitialize
CoRevokeClassObject
RevokeDragDrop
CoCreateInstance
RegisterDragDrop
OleInitialize
CoInitialize
CoCreateGuid
CoUninitialize
CoRegisterClassObject

oleaut32

SafeArrayCreateVector
VariantInit
SysAllocString
SafeArrayAccessData
SafeArrayUnaccessData

nscrt

cos
??2@YAPAXI@Z
strchr
strcmp
wcsstr
_wtoi
free
??3@YAXPAX@Z
malloc
_vsnprintf
memset
fclose
fread
fopen
memcpy
strstr
sqrt
sin
pow
fputc
fprintf
atoi
fgets
memcmp
memmove
_vsnwprintf
strtol
_wcsdup
_purecall
calloc
strcpy
fwrite
ftell
fseek
wcscmp
fabs
strncmp
realloc
log
abs
strlen
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_wfopen
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
__CxxFrameHandler
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fputs
wcschr
_wchmod
_waccess
_i64tow
__dllonexit
_wcsnicmp
_wcsicmp
_stricmp
_strdup
_strnicmp
_CIpow
toupper

Sections

.text
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gnjrhfy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 262KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f63940e25f6f0df76265fbbb0e8ef837

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

nscrt

Sections

.text Size: 382KB - Virtual size: 382KB

.rdata Size: 61KB - Virtual size: 61KB

.data Size: 8KB - Virtual size: 73KB

.rsrc Size: 600KB - Virtual size: 600KB

.reloc Size: 63KB - Virtual size: 63KB

.text Size: 263KB - Virtual size: 264KB

gnjrhfy Size: - Virtual size: 4KB

.text Size: 262KB - Virtual size: 264KB

.text
Size: 382KB - Virtual size: 382KB

.rdata
Size: 61KB - Virtual size: 61KB

.data
Size: 8KB - Virtual size: 73KB

.rsrc
Size: 600KB - Virtual size: 600KB

.reloc
Size: 63KB - Virtual size: 63KB

.text
Size: 263KB - Virtual size: 264KB

gnjrhfy
Size: - Virtual size: 4KB

.text
Size: 262KB - Virtual size: 264KB