751f014c9390e19d35cbc66f4060e492_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

751f014c9390e19d35cbc66f4060e492_JaffaCakes118
Size

96KB
MD5

751f014c9390e19d35cbc66f4060e492
SHA1

16c2dae4d6f01726c76ef2ac559af21cdc2835c4
SHA256

0128b202fa6f5c8e9af643d8bf82b702aeedba4acf4b90e4520891eabc2d5e6e
SHA512

1b5e73c863d5775adc140910c66588b0dd29d57715cdaa4269dbb3c79f3b77253b94c1a31961e2989af237bbbef2cba2d37decafa55a1da3d3b376d94890abb0
SSDEEP

1536:aVZx+kRly08lMLfzZg0SfD68Jg4ihXVvK0BjWHXekw1zx3cGIGLI8kyULE6r9ZYo:8jy0fZgfDfXjNrR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
751f014c9390e19d35cbc66f4060e492_JaffaCakes118

Files

751f014c9390e19d35cbc66f4060e492_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ac17181a8017020808d658979289bb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncpy
malloc
free
modf
_ftol
atoi
floor
strncmp
toupper
sprintf
_strnicmp

kernel32

LCMapStringA
GetModuleHandleA
Sleep
RtlMoveMemory
GetCurrentProcess
ReadProcessMemory
lstrcpynA
LocalSize
RtlZeroMemory
GetCurrentThreadId
MulDiv
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr

user32

CallNextHookEx
GetClassLongA
GetWindowLongA
DefWindowProcA
GetDlgItem
IsWindow
DestroyWindow
GetFocus
GetClientRect
InvalidateRect
ValidateRect
UpdateWindow
GetWindowRect
ScreenToClient
MoveWindow
SetWindowPos
PostMessageA
SetParent
IsWindowVisible
IsWindowEnabled
EnableWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
MessageBoxA
SetWindowLongA
GetPropA
RemovePropA
GetDC
ReleaseDC
GetSysColor
DestroyAcceleratorTable
BeginPaint
FillRect
EndPaint
EndDialog
DestroyIcon
UnregisterClassA
PostQuitMessage
SetCursor
SetWindowsHookExA
LoadCursorA
RegisterClassExA
IsIconic
IsZoomed
GetSystemMetrics
GetMenu
SetMenu
DrawMenuBar
RegisterWindowMessageA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetClassNameA
CreateMenu
CreatePopupMenu
DestroyMenu
AppendMenuA
GetMenuItemCount
InsertMenuA
SetMenuInfo
GetSubMenu
GetMenuItemID
CheckMenuRadioItem
TrackPopupMenu
GetMenuStringA
GetMenuItemInfoA
GetMenuItemRect
GetMenuCheckMarkDimensions
GetMenuState
GetMenuInfo
GetMenuDefaultItem
MenuItemFromPoint
RemoveMenu
CheckMenuItem
SetMenuItemInfoA
SetMenuItemBitmaps
SetMenuDefaultItem
wsprintfA
CreateWindowExA
LoadIconA
UnhookWindowsHookEx
GetAsyncKeyState
GetParent
ClientToScreen
DefFrameProcA
CallWindowProcA
SendMessageA
SetFocus
FindWindowExA
SetForegroundWindow
ShowWindow
FindWindowA
SetPropA

shell32

ShellExecuteEx
Shell_NotifyIconA

gdi32

SetTextColor
SetBkMode
GetStockObject
SetBkColor
DeleteObject
GetDeviceCaps
CreateFontA
GetObjectA
CreateSolidBrush
CreatePatternBrush

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ac17181a8017020808d658979289bb3

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

shell32

gdi32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 52KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 52KB

.rsrc
Size: 4KB - Virtual size: 4KB