a5811f030f9354f0db606d5d61ac6464_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a5811f030f9354f0db606d5d61ac6464_JaffaCakes118
Size

125KB
MD5

a5811f030f9354f0db606d5d61ac6464
SHA1

dc404ac07f01bd24235716aa131e7fef63b6c15b
SHA256

beb56e157f92190fd79dda59ad3e77eb5d7e1bc4214f42a3237aa5f9f014c740
SHA512

3443560fe7890153827a8cd9ec17065c84bd95993a0faf888c8b6a41ab64fa24d57bb8c3fc045402c884b824c37846f0e7fa37359ae9d8585201695a9c3f05d6
SSDEEP

3072:WdntODShH5UimRQisduPX30/GE7aB8Ghxm3O1Xm+658g:W3ODa51YB5PX6aBd4x5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5811f030f9354f0db606d5d61ac6464_JaffaCakes118

Files

a5811f030f9354f0db606d5d61ac6464_JaffaCakes118
.exe windows:5 windows x86 arch:x86

22aded04a39f6dcc64974bed07647065

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

putc
_controlfp
__set_app_type
wcscspn
strstr
__p__fmode
strchr
__p__commode
_amsg_exit
remove
_initterm
atoi
_acmdln
isprint
printf
isalnum
swprintf
qsort
isspace
iswdigit
tolower
fread
exit
wcspbrk
strtoul
_ismbblead
_XcptFilter
fgetc
vsprintf
wcscat
wcstok
fwrite
_exit
_cexit
fflush
fputs
__setusermatherr
__getmainargs
putchar
clearerr

user32

WaitForInputIdle
SetSysColors
DeleteMenu
ChildWindowFromPoint
GetDlgItem
RemovePropW
FindWindowExW
InvertRect
MapVirtualKeyA
GetLastActivePopup
CheckMenuItem
UnionRect
SendMessageTimeoutW
wsprintfA
SetRect
CreateIconFromResource
GetMenuItemRect
GetPropW
LoadCursorW
DeferWindowPos
GetScrollPos
GetWindow
GetNextDlgTabItem
GetKeyNameTextW
GetClientRect
IsCharAlphaNumericW
SendNotifyMessageW
WaitMessage
RedrawWindow
CheckDlgButton
GetMenuStringA
ArrangeIconicWindows
SetScrollInfo
GetMenu
LoadMenuA
GetMenuItemCount
CharToOemA
SetMenuContextHelpId
DispatchMessageA
SetCursorPos
BeginPaint
GetNextDlgGroupItem
DrawStateW
InflateRect
LoadMenuW
GetParent
OpenInputDesktop
TranslateMessage
SetTimer
BeginDeferWindowPos
SetLastErrorEx
GetClassInfoExW
SetMenuItemBitmaps
GetClassInfoW
DrawTextA
WindowFromPoint
IsRectEmpty
GetSysColorBrush
GetScrollInfo
ScrollWindow
FillRect
IsCharAlphaW
TranslateAcceleratorA
MonitorFromPoint
IsDialogMessageA
wvsprintfW
CharToOemW
DefWindowProcA
RegisterWindowMessageA
GetUpdateRgn
PostMessageA
ClientToScreen
GetClassInfoExA
DialogBoxParamA
CreateCursor
IntersectRect
GetMenuCheckMarkDimensions
SetScrollPos
SystemParametersInfoA
IsZoomed
InsertMenuItemW
OffsetRect
DestroyMenu
GetUserObjectInformationA
InsertMenuW
CopyAcceleratorTableW
EndDialog
FrameRect
GetKeyState
AppendMenuA

gdi32

RestoreDC
SetTextColor
GetCharWidth32W
SetWindowExtEx
StartDocW
GetObjectW
DeleteDC
CreateBrushIndirect
PolyBezier
SetAbortProc
GetSystemPaletteEntries
IntersectClipRect
LineTo
GetTextMetricsA
GetNearestPaletteIndex
RemoveFontResourceW
FlattenPath
Ellipse
CreateBitmapIndirect
LPtoDP
Rectangle
GetTextMetricsW
GetClipBox
CreateRectRgn
PatBlt
SetDIBColorTable
GetROP2
CreateDiscardableBitmap
GetDeviceCaps
EndDoc
RoundRect
DeleteObject
Polygon
TextOutW
SetBitmapDimensionEx
GetTextCharsetInfo
GetTextExtentPoint32W
GetTextExtentPointA
EndPath

kernel32

QueryDosDeviceW
DeleteAtom
GetTimeFormatA
GetShortPathNameW
GetCommState
HeapReAlloc
lstrcmpA
FileTimeToDosDateTime
GetDateFormatA
CreateSemaphoreA
EnterCriticalSection
GetLocaleInfoA
ClearCommError
GetCommProperties
GetSystemDefaultUILanguage
GetFileAttributesExA
LockResource
GetVersion
AreFileApisANSI
ResumeThread
SetCurrentDirectoryW
ReadFile
DisconnectNamedPipe
IsValidLanguageGroup
lstrcatW
LoadLibraryW
GetThreadTimes
MulDiv
GetBinaryTypeW
IsDBCSLeadByteEx
VirtualAlloc
GetFileInformationByHandle
GetCurrentThread
CompareStringW
GetCommConfig
FreeLibrary
IsBadStringPtrW
MapViewOfFile
GetLastError
GetTempFileNameW
CreateEventW

advapi32

LookupPrivilegeDisplayNameW

Exports

Exports

?TryEnterCriticalSectionJKDJHLJHKDljfjhl@@YGKEPA_WG@Z

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dbgdir
Size: 59KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22aded04a39f6dcc64974bed07647065

Headers

File Characteristics

Imports

msvcrt

user32

gdi32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.itext Size: 55KB - Virtual size: 55KB

.edata Size: 17KB - Virtual size: 16KB

.dbgdir Size: 59KB - Virtual size: 179KB

.data Size: 55KB - Virtual size: 55KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.itext
Size: 55KB - Virtual size: 55KB

.edata
Size: 17KB - Virtual size: 16KB

.dbgdir
Size: 59KB - Virtual size: 179KB

.data
Size: 55KB - Virtual size: 55KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB