a44f490f5a62b4b93c466b20157b11b8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a44f490f5a62b4b93c466b20157b11b8_JaffaCakes118
Size

839KB
MD5

a44f490f5a62b4b93c466b20157b11b8
SHA1

dc6e540cc512f80122c5aa3e7450101df7854324
SHA256

778d91b97371696b4be9a387b1367d7fed27c227ed3507989932b7c0f7971288
SHA512

ad7e3bfb8d6c634940e84f65274f78606324f9c4d7826a736803a6263e487140cf60285f68e21c3f9fb756475f2fde83c781366453205d0ccafdea792caa92f2
SSDEEP

24576:+roGifL9CsSfRGC+zipuNuBnD4OVNFK6DzIDq:+BifLEj8Nz9OVNFNzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a44f490f5a62b4b93c466b20157b11b8_JaffaCakes118

Files

a44f490f5a62b4b93c466b20157b11b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8008eb877c59212e3425c026b61ca9cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
atof
strcmp
memmove
strlen
sprintf
strncmp
memcpy
fclose
fabs
ceil
malloc
floor
free
strncpy

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
HeapAlloc
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
Sleep
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
SetLastError
TlsAlloc
TlsSetValue
GlobalAlloc
GlobalFree
GetVersionExA
MulDiv
DeleteFileA
WriteFile
CreateFileA
SetFilePointer

comctl32

InitCommonControls
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon

user32

SetClassLongA
RedrawWindow
SendMessageA
SetWindowLongA
GetSysColorBrush
GetParent
GetWindowLongA
GetWindow
GetSysColor
GetClassNameA
IsWindow
FillRect
DrawTextA
GetDlgCtrlID
InvalidateRect
CallWindowProcA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
DestroyWindow
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetCursor
BeginPaint
GetClientRect
GetCapture
DrawStateA
EndPaint
DefWindowProcA
UpdateWindow
ReleaseCapture
SetCapture
LoadCursorA
ShowWindow
SetWindowPos
GetWindowRect
ScreenToClient
RemovePropA
SetPropA
GetPropA
GetSystemMetrics
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
GetActiveWindow
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassA
AdjustWindowRectEx
CreateAcceleratorTableA
SetCursorPos
LoadImageA
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
PostMessageA
GetCursorPos
SetFocus
GetFocus
IsChild
EnumChildWindows
DefFrameProcA
DestroyIcon
GetIconInfo
CreateIconFromResourceEx
CreateIconFromResource

gdi32

DeleteObject
CreatePatternBrush
GetStockObject
CreateSolidBrush
SetBkMode
SetTextColor
SetBkColor
SelectObject
CreateRectRgnIndirect
SelectClipRgn
TextOutA
GetTextExtentPoint32A
CreatePen
MoveToEx
LineTo
CreateCompatibleBitmap
CreateDCA
CreateCompatibleDC
DeleteDC
GetObjectA
StretchBlt
GetObjectType
SetDIBits
CreateDIBSection
GetDIBits
BitBlt
CreateBitmap
SetPixel
GetDeviceCaps
CreateFontA

ole32

CoInitialize
RevokeDragDrop

winmm

timeBeginPeriod
timeEndPeriod

Sections

.code
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 789KB - Virtual size: 790KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8008eb877c59212e3425c026b61ca9cc

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

ole32

winmm

Sections

.code Size: 3KB - Virtual size: 2KB

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 512B - Virtual size: 434B

.data Size: 789KB - Virtual size: 790KB

.rsrc Size: 5KB - Virtual size: 4KB

.code
Size: 3KB - Virtual size: 2KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 512B - Virtual size: 434B

.data
Size: 789KB - Virtual size: 790KB

.rsrc
Size: 5KB - Virtual size: 4KB