74e9772beb3083287b2c43287338d155_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74e9772beb3083287b2c43287338d155_JaffaCakes118
Size

120KB
MD5

74e9772beb3083287b2c43287338d155
SHA1

2cc22225e58b988c8ed5bae33b1e6bba0d504500
SHA256

f58316dda95b24b9b9dae5701ce8dcb3d1e043c27401b9825fb8d68cf3755354
SHA512

39ad06a347290ecbec8460e5c01c16023eec54b83f7cd03f09fa2d0ad596ba124934c3ec46eec4f3442c9ffebd8e78a4afaff7392cb8e7da990c769f03d66aba
SSDEEP

3072:1aVyu8L0YKGbmei5cuUzQ4rpCt/VimcM1Bn8xg:syJzQ4rpC+mcECx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74e9772beb3083287b2c43287338d155_JaffaCakes118

Files

74e9772beb3083287b2c43287338d155_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69ae181896e132d612210eb762b3321e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6376
ord3748
ord5065
ord1725
ord5260
ord2446
ord6614
ord5277
ord2982
ord3147
ord3259
ord4465
ord6691
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4432
ord6478
ord825
ord6514
ord6800
ord4284
ord2233
ord2379
ord2864
ord800
ord539
ord2818
ord540
ord6814
ord537
ord2575
ord6055
ord4396
ord5241
ord5290
ord3749
ord1727
ord5261
ord2124
ord3136
ord3402
ord4424
ord3574
ord809
ord609
ord556
ord567
ord4275
ord2754
ord5875
ord3874
ord2859
ord3663
ord3571
ord3626
ord640
ord2414
ord2405
ord1641
ord1640
ord323
ord6197
ord1146
ord6358
ord1088
ord2122
ord2614
ord535
ord5785
ord3692
ord3573
ord858
ord2450
ord4299
ord6215
ord6699
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord641
ord324
ord6453
ord2302
ord4234
ord4347
ord1768
ord6199
ord3092
ord924
ord4710
ord1200
ord1949
ord818
ord3693
ord613
ord1168
ord6880
ord6605
ord2055
ord5787
ord289
ord860
ord1601
ord1871
ord4220
ord2584
ord3654
ord2863
ord2438
ord1644
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord656
ord2621
ord1134
ord5572
ord2915
ord2642
ord3721
ord795
ord3089
ord755
ord6172
ord3797
ord5789
ord2860
ord470
ord2452
ord6805
ord3610
ord6380
ord6710
ord6378
ord5981
ord6270
ord1175
ord3097
ord5953
ord5710
ord4129
ord5683
ord6877
ord2527
ord482
ord3499
ord3177
ord2515
ord355
ord2645
ord941
ord4476
ord4340
ord5076
ord6817
ord4892
ord4370
ord4899
ord4588
ord4589
ord6835
ord6808
ord6856
ord6845
ord6812
ord6815
ord6816
ord6858
ord6846
ord6839
ord6847
ord6867
ord6859
ord6832
ord6855
ord6823
ord6857
ord6807
ord6591
ord2648
ord4441
ord4837
ord3798
ord5281
ord4353
ord6374
ord5163
ord2385
ord5240
ord4407
ord1776
ord4078
ord6054
ord4108
ord4960
ord4963
ord4524
ord4529
ord4526
ord4543
ord4545
ord4531
ord4889
ord5788
ord4720
ord6650
ord6597
ord3619
ord823
ord1576

msvcrt

_stricmp
__CxxFrameHandler
sprintf
_strupr
_setmbcp
_splitpath
atoi
free
wcscmp
malloc
_ftol
atol
_mbscmp
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

kernel32

GetCurrentThreadId
GetVersionExA
GetProcAddress
GlobalAlloc
GlobalLock
GetPrivateProfileStringA
WritePrivateProfileStringA
Sleep
GetModuleHandleA
GetModuleFileNameA
GetVersion
CreateFileA
WriteFile
CloseHandle
GetPrivateProfileIntA
GetTickCount
FindFirstFileA
FindClose
GetStartupInfoA

user32

SetWindowPos
RegisterWindowMessageA
TranslateAcceleratorA
SetCursor
PtInRect
LoadImageA
IsIconic
RedrawWindow
SetWindowLongA
AppendMenuA
GetSystemMenu
ModifyMenuA
EnableMenuItem
EmptyClipboard
ChildWindowFromPointEx
SetWindowTextA
PostQuitMessage
LoadAcceleratorsA
SetFocus
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
GetWindowLongA
GetSysColor
EnableWindow
GetParent
LoadMenuA
CloseClipboard
GetDesktopWindow
ValidateRect
ScreenToClient
LoadCursorA
DrawIcon
KillTimer
SetTimer
GetSystemMetrics
GetWindowRect
GetClientRect
FillRect
ReleaseDC
PeekMessageA
DispatchMessageA
TranslateMessage
GetNextDlgGroupItem
PostMessageA
ReleaseCapture
InvalidateRect
ClientToScreen
LoadBitmapA
SetWindowRgn
GetDC
GetCapture
GetCursorPos
GetSubMenu
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
WindowFromPoint
SendMessageA
DrawEdge
IsWindow
LoadIconA
OffsetRect
SetClipboardData
OpenClipboard
MessageBoxA
DrawFocusRect

gdi32

StretchBlt
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
SelectClipRgn
CombineRgn
CreateRectRgn
GetPixel
CreateDIBSection
CreateDCA
GetBitmapBits
DeleteDC
CreateFontA
Rectangle
CreatePen
GetDIBits
GetStockObject
GetDeviceCaps
RestoreDC
EndDoc
EndPage
StretchDIBits
StartPage
StartDocA
CreateSolidBrush
DeleteObject
GetObjectA

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA
Shell_NotifyIconA
SHGetSpecialFolderPathA

comctl32

_TrackMouseEvent

oleaut32

SysFreeString

shlwapi

PathCompactPathA

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipAlloc
GdipFree
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDisposeImage
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69ae181896e132d612210eb762b3321e

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

comdlg32

shell32

comctl32

oleaut32

shlwapi

gdiplus

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 20KB - Virtual size: 18KB