ae20814bf4a0c9d71462de86ac837265_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ae20814bf4a0c9d71462de86ac837265_JaffaCakes118
Size

580KB
MD5

ae20814bf4a0c9d71462de86ac837265
SHA1

530386e3c0eb291dbd366e2b0d96d0870fc9b5f0
SHA256

9a93ef824351842a9c2721c534206edbcf12e76bc05ad32a729e2cd1ee011dd5
SHA512

368383fbe3e3ed48aff449870e707d744007659d50392a155fbe3d72c99e882a11360db896413a302e2de9929dd10165eba058a2dea1df462fc4bde2b91cefbc
SSDEEP

12288:7NzKj5fTv3GZgMCT82qcV4cu0wrHMD9MQUpyDR0PPRtenwE57g3u+bOD:7NzKjtbGitw254cu0UHMllDR52u+b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae20814bf4a0c9d71462de86ac837265_JaffaCakes118

Files

ae20814bf4a0c9d71462de86ac837265_JaffaCakes118
.exe windows:4 windows x86 arch:x86

932695d29ad68c48c18dfba46f1606d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsDlgButtonChecked
ShowWindow
IsMenu
OemKeyScan
LoadCursorA
DestroyWindow
TileChildWindows
GetScrollPos
DdeCreateStringHandleA
GetCursor
DefWindowProcA
CreateWindowExW
MessageBoxA
GetMenuItemRect
GetScrollBarInfo
CopyAcceleratorTableA
GetCursorInfo
SetWindowTextW
RegisterClassA
SendMessageA
RegisterClipboardFormatA
MsgWaitForMultipleObjectsEx
TabbedTextOutA
CharNextExA
MapVirtualKeyExW
FreeDDElParam
TrackPopupMenuEx
DlgDirSelectExA
GetPropA
GetWindowContextHelpId
SetDeskWallpaper
CreateDialogIndirectParamW
EnumThreadWindows
RegisterClassExA
WaitMessage
EndDialog
DdeImpersonateClient
InSendMessageEx
EndPaint
DrawFocusRect
ScreenToClient

gdi32

GetBoundsRect
CreateDCW
SetBkColor
SetTextAlign
EqualRgn
CreateFontIndirectA
SetWinMetaFileBits
GetObjectW
EnumMetaFile
DeleteDC
GetICMProfileA
SelectPalette
ScaleWindowExtEx
SelectObject
EndDoc
SetPixelFormat
DeleteObject
GetDeviceCaps
GetTextExtentPointW
GetKerningPairs
CreateCompatibleDC
GetPaletteEntries
PolylineTo
CreateDIBSection
Chord
RemoveFontResourceW
SetMetaFileBitsEx

comctl32

ImageList_EndDrag
ImageList_DragShowNolock
ImageList_GetIcon
DrawStatusTextA
InitCommonControlsEx
CreatePropertySheetPage
MakeDragList
CreatePropertySheetPageA
GetEffectiveClientRect
ImageList_Copy

kernel32

RemoveDirectoryA
CloseHandle
TransmitCommChar
CreatePipe
CreateNamedPipeA
FreeEnvironmentStringsW
GetConsoleCP
EnumResourceNamesA
GetACP
HeapFree
EnumResourceLanguagesW
GetLocaleInfoA
VirtualQuery
GetOEMCP
LeaveCriticalSection
SetConsoleCtrlHandler
LCMapStringA
GetStringTypeA
SetCurrentDirectoryW
IsValidLocale
CompareStringW
GetTickCount
WriteProfileSectionA
FlushFileBuffers
Sleep
EnumSystemLocalesA
GetCompressedFileSizeA
InterlockedDecrement
GetWindowsDirectoryW
GlobalLock
InitializeCriticalSection
TlsAlloc
FreeEnvironmentStringsA
GetCommandLineA
DeleteCriticalSection
GetLogicalDrives
WideCharToMultiByte
LoadLibraryExA
SetUnhandledExceptionFilter
GetFileType
GlobalAlloc
ReadConsoleA
GetStdHandle
HeapLock
LCMapStringW
CreateFileA
VirtualFree
GetConsoleOutputCP
OpenSemaphoreA
GetStartupInfoW
lstrcpyn
CompareStringA
GetModuleHandleA
GetModuleFileNameW
EnumTimeFormatsW
SetEnvironmentVariableA
SetHandleCount
HeapDestroy
GetShortPathNameW
InterlockedIncrement
EnterCriticalSection
HeapSize
GetTimeZoneInformation
UnhandledExceptionFilter
ReadConsoleInputA
CreateFileMappingW
InterlockedExchange
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapAlloc
GetDriveTypeA
GetSystemDirectoryA
InitializeCriticalSectionAndSpinCount
GetLogicalDriveStringsW
QueryPerformanceCounter
WriteConsoleW
UnmapViewOfFile
TerminateProcess
GetLastError
HeapReAlloc
WritePrivateProfileSectionW
SetThreadIdealProcessor
CreateSemaphoreA
GetCurrentProcess
MoveFileExA
GetCurrentThread
GetTimeFormatA
MoveFileW
LoadLibraryA
GetComputerNameA
SetFilePointer
GetDateFormatA
RaiseException
IsValidCodePage
ReadFile
GetCompressedFileSizeW
ExitProcess
GetProcAddress
GetCurrentThreadId
GetVersionExA
GetUserDefaultLCID
SetStdHandle
RtlUnwind
GetStartupInfoA
TlsFree
TlsGetValue
TlsSetValue
HeapCreate
GetStringTypeW
GetCurrentProcessId
CreateMutexA
WriteFile
GetStringTypeExA
WriteConsoleA
MultiByteToWideChar
GetEnvironmentStringsW
GetEnvironmentStrings
SetPriorityClass
OpenMutexA
SetLastError
GetModuleFileNameA
GetDriveTypeW
IsDebuggerPresent
GetCPInfo
GetProcessHeap
VirtualAlloc
GetCommandLineW
FreeLibrary
lstrcatW
GetConsoleMode
SetConsoleScreenBufferSize
EnumSystemCodePagesW

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

932695d29ad68c48c18dfba46f1606d7

Headers

File Characteristics

Imports

user32

gdi32

comctl32

kernel32

Sections

.text Size: 176KB - Virtual size: 173KB

.rdata Size: 264KB - Virtual size: 261KB

.data Size: 112KB - Virtual size: 128KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 176KB - Virtual size: 173KB

.rdata
Size: 264KB - Virtual size: 261KB

.data
Size: 112KB - Virtual size: 128KB

.rsrc
Size: 24KB - Virtual size: 21KB