9642629a06a2e28c50492520f50a3367_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9642629a06a2e28c50492520f50a3367_JaffaCakes118
Size

148KB
MD5

9642629a06a2e28c50492520f50a3367
SHA1

194e7dad2b3756baaa0ee77f1e6c9ca153483071
SHA256

ca4efd5f8c6879f6265b9c73e24113d9c3224491bd5313dd44edba8d6988a34e
SHA512

b55165f741a451b01c912b0bb0ac7a77502db09215bef0e9c933c7ec20072cb988cfe3156d0d224a8c159aecb64285a6181de27fd002bbc7f65f90f7006681e7
SSDEEP

3072:tck7MHCef1F2V/UhLxuiht9BcaGo1ivRafqVqdkvd/drT:t3MHCI2V/ExuiYo17fqQdw/dr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9642629a06a2e28c50492520f50a3367_JaffaCakes118

Files

9642629a06a2e28c50492520f50a3367_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcc7da16954f7b26f9ee1e65a43fccaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ctivbasic

??0CTMediaBasic@@QAE@XZ
??1CTMediaBasic@@UAE@XZ
?GetFrameHBitmap@CTMediaBasic@@QAEPAUHBITMAP__@@JJN@Z
?Load@CTPhotoBasic@@QAEHPAUHBITMAP__@@@Z
?Load@CTPhotoBasic@@QAEHPBD@Z
?Save@CTPhotoBasic@@QAEHPBDK@Z
?Load@CTMediaBasic@@QAEHPBD@Z
?UnLoad@CTMediaBasic@@QAEXXZ
?GetThumbnailHBitmap@CTPhotoBasic@@QAEPAUHBITMAP__@@HH@Z
?UnLoad@CTPhotoBasic@@QAEXXZ
??0CTPhotoBasic@@QAE@XZ
?Draw@CTPhotoBasic@@QAEHPAUHBITMAP__@@PAUHDC__@@PAUtagRECT@@2H@Z
??1CTPhotoBasic@@UAE@XZ

shlwapi

PathFindFileNameA
PathRemoveFileSpecA
PathRemoveBackslashA
PathAddBackslashA

mfc42

ord3262
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3574
ord609
ord641
ord567
ord324
ord2301
ord2302
ord4234
ord2086
ord6215
ord6334
ord537
ord4710
ord3721
ord795
ord860
ord2289
ord2370
ord4160
ord2379
ord6199
ord823
ord3370
ord2582
ord4402
ord3640
ord772
ord693
ord500
ord6142
ord4243
ord3996
ord5860
ord5710
ord2818
ord6905
ord5606
ord5603
ord940
ord536
ord2614
ord6453
ord2864
ord6883
ord6143
ord6904
ord5953
ord2817
ord4224
ord6283
ord6282
ord2763
ord3136
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord812
ord801
ord765
ord656
ord2764
ord1168
ord2621
ord1134
ord2725
ord6144
ord1146
ord559
ord2642
ord5862
ord755
ord470
ord4299
ord541
ord3301
ord941
ord3610
ord3742
ord818
ord4275
ord6442
ord1233
ord3698
ord1105
ord2652
ord5861
ord6880
ord1669
ord5981
ord668
ord3181
ord4058
ord3178
ord2781
ord2770
ord356
ord926
ord6888
ord3998
ord6675
ord3398
ord3733
ord686
ord810
ord384
ord2453
ord4271
ord2862
ord1642
ord3287
ord3303
ord6008
ord4506
ord4125
ord6663
ord4278
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4396
ord1776
ord4078
ord6055
ord2575
ord3597
ord4425
ord5280
ord4407
ord1775
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord5683
ord4129
ord535
ord540
ord858
ord800
ord924
ord922
ord2915
ord5572
ord5858
ord825
ord341
ord6140
ord654
ord4673
ord1576

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
??1type_info@@UAE@XZ
_setmbcp
_CxxThrowException
wcslen
__CxxFrameHandler
_ftol
_mbsicmp
_mbscmp
qsort
_splitpath
sprintf
_mbsinc
_mbschr
__dllonexit
_onexit
_exit
_XcptFilter
_controlfp

kernel32

SetEvent
FreeLibrary
GetLastError
FormatMessageA
LocalFree
GetTempPathA
CreateSemaphoreA
CloseHandle
IsBadReadPtr
lstrcpynA
GetDriveTypeA
InterlockedDecrement
LoadLibraryA
GetProcAddress
ResumeThread
MulDiv
GetUserDefaultLangID
Sleep
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
lstrlenA
GetWindowsDirectoryA
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
CreateEventA
WaitForMultipleObjects
WaitForSingleObject
ResetEvent
GetFileAttributesA
GlobalFree
GlobalUnlock
GetModuleFileNameA
GlobalLock
CreateFileA
GetLogicalDrives
lstrlenW
GetCommandLineA
DeviceIoControl

user32

GetParent
GetKeyState
SetTimer
GetClientRect
InvalidateRect
SetFocus
ShowWindow
SetForegroundWindow
FindWindowA
GetDlgItem
KillTimer
GetWindowRect
DrawIcon
GetSystemMetrics
MessageBoxA
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
PostMessageA
UpdateWindow
IsWindowVisible
IsWindow
LoadCursorA
IsIconic
SendMessageA
GetDC
ReleaseDC
RegisterWindowMessageA
EnableWindow
LoadIconA

gdi32

SetDIBits
CreateDIBitmap
GetStockObject
GetObjectA
GetDeviceCaps
CreateFontIndirectA
DeleteObject
CreateBitmap

advapi32

RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoA
SHFileOperationA
ShellExecuteA
SHGetSpecialFolderPathA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ImageList_ReplaceIcon

ole32

OleInitialize
OleUninitialize

oleaut32

CreateErrorInfo
SetErrorInfo
GetErrorInfo
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
VariantChangeType
SysFreeString

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fcc7da16954f7b26f9ee1e65a43fccaf

Headers

File Characteristics

Imports

ctivbasic

shlwapi

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 28KB - Virtual size: 28KB