8eea933d532ca93e30878da3a94834d0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8eea933d532ca93e30878da3a94834d0_JaffaCakes118
Size

101KB
MD5

8eea933d532ca93e30878da3a94834d0
SHA1

9bcec5fdf542ffef96265f7755eb1522a29c86f0
SHA256

2ec10e850306d2b57a7115c023c296b0e417c0b7ded0043e539e23de45ccb834
SHA512

1f422fef60c1d55829fd54d3f1da6cb47b366687df9a9fab19c9535db73df270bb6cdf289c8b5c21219b22ef1d8ac7b4f0aa9c0109ab88196ba6e1608a4fbcda
SSDEEP

1536:BL2Tfyf+BnqREWiiji0VlmTp44mMf0VhocY4fcSzrrKRVnmFO:Zi7nn0OtvfgCt4fcmH4Vm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eea933d532ca93e30878da3a94834d0_JaffaCakes118

Files

8eea933d532ca93e30878da3a94834d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d61ec876f465a4083e0294ead4fe737a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
sprintf
strcmp
strncmp
memcpy
fopen
malloc
free
fclose
strncpy
strlen
localtime
mktime
strcpy
_strnicmp
gmtime
fabs
ceil
floor
pow
exit
__p__iob
fprintf
fwrite
fflush
ferror
getenv
sscanf
fmod
sin
cos
abs

kernel32

GetModuleHandleA
HeapCreate
CloseHandle
HeapDestroy
ExitProcess
HeapFree
HeapAlloc
SetLastError
InitializeCriticalSection
FreeLibrary
LoadLibraryA
GetProcAddress
CreateDirectoryA
WriteFile
CreateFileA
ReadFile
SetFilePointer
GetFileSize
GetLocalTime
GlobalLock
GlobalUnlock
TlsAlloc
TlsSetValue
GetVersionExA
HeapReAlloc

user32

GetKeyState
GetAsyncKeyState
SetTimer
GetForegroundWindow
GetWindowTextA
GetClipboardOwner
SystemParametersInfoA
GetDC
ReleaseDC
GetWindowThreadProcessId
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
DestroyWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
GetSystemMetrics
GetActiveWindow
GetWindowRect
CreateWindowExA
SetPropA
ShowWindow
CreateAcceleratorTableA
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetCursorPos
LoadImageA
SetCursor
GetWindowLongA
GetParent
MapWindowPoints
MoveWindow
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
GetPropA
SetFocus
GetFocus
GetClientRect
FillRect
EnumChildWindows
DefFrameProcA
DefWindowProcA
IsWindowEnabled
IsWindowVisible
IsChild
GetClassNameA
CallWindowProcA
SetWindowLongA
OpenClipboard
EmptyClipboard
CloseClipboard
GetClipboardData
DestroyIcon
GetIconInfo
DrawIconEx

gdi32

BitBlt
DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
SelectObject
DeleteDC
GdiSetBatchLimit
GdiGetBatchLimit
CreateDIBSection
GetDIBits
CreateBitmap
SetPixel
GetTextExtentPoint32A
SetBkMode
SetTextAlign
SetBkColor
SetTextColor
TextOutA
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetPixel
CreateFontIndirectA
GetTextMetricsA
CreateCompatibleBitmap

comctl32

InitCommonControlsEx

ole32

RevokeDragDrop

shlwapi

PathFileExistsA
PathIsDirectoryA

Sections

.code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d61ec876f465a4083e0294ead4fe737a

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comctl32

ole32

shlwapi

Sections

.code Size: 8KB - Virtual size: 8KB

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 700B

.code
Size: 8KB - Virtual size: 8KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 700B