af32f3982073b5209412bc8ab4e0401b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af32f3982073b5209412bc8ab4e0401b_JaffaCakes118
Size

155KB
MD5

af32f3982073b5209412bc8ab4e0401b
SHA1

d022d0b6727b8f7258efdcdf6f887f76c5d66e59
SHA256

15d211a59ecffa88ac265421ffa600f573a1ddf74f11fc8c406434e9667ef2c1
SHA512

37315ec5c954ad8875bd29d2958927532d54d5ad7d14b3e6a0801842b657369aa13f8e038d1d96c948840af49da733330c14445c1f4b9837c09adba7315bea8f
SSDEEP

3072:CmD8hvV1WMQJFgK7F6V83z9s70YDkMhxa:C1+Zgg55sIE7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af32f3982073b5209412bc8ab4e0401b_JaffaCakes118

Files

af32f3982073b5209412bc8ab4e0401b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d6bdfb1ee1811abcdfee7b41ac43efc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSysColor
SendMessageA
FillRect
BeginPaint
GetDlgItemTextA
InsertMenuA
FindWindowExA
LoadMenuA
KillTimer
GetDlgItem
GetKeyState
IsIconic
GetMenu
DeferWindowPos
SetMenuItemInfoA
SetWindowTextA
GetWindowDC
SetCapture
CloseClipboard
GetClassNameA
EnumChildWindows
CheckRadioButton
SetUserObjectSecurity
DestroyWindow
CreateMenu
SetForegroundWindow
DefDlgProcA
PeekMessageA
PostMessageA
LoadAcceleratorsA
DispatchMessageA
SetWindowPos
MoveWindow
SetScrollInfo
PostQuitMessage
SetWindowPlacement
IsWindowVisible
RegisterWindowMessageA
UpdateWindow
GetPropA
GetSystemMetrics
GetMenuItemCount
EmptyClipboard
OpenClipboard
GetSysColorBrush
GetUpdateRgn
DeleteMenu
CopyRect
ShowWindow
GetCapture
PtInRect
MessageBoxA
InvalidateRgn
DestroyIcon
IsDlgButtonChecked
IsZoomed
DrawFrameControl

kernel32

GetConsoleOutputCP
GetConsoleMode
GetCurrentProcessId
GetCommandLineW
GetSystemDirectoryA
IsBadStringPtrA
SearchPathA
ResumeThread
InterlockedIncrement
GetModuleHandleA
LoadResource
GetComputerNameW
GetACP
GlobalLock
GetFileTime
LCMapStringA
SetLastError
ResetEvent
HeapSize
TlsAlloc
LockResource
GetVersionExA
GetEnvironmentStrings
LoadLibraryW
lstrlenW
LoadLibraryA
CreateToolhelp32Snapshot
GetSystemInfo
SetThreadAffinityMask
SetStdHandle
GetLocaleInfoA
Module32Next
GetStartupInfoA
CreateEventA
LocalAlloc
OpenEventA
TerminateProcess
IsValidCodePage
FreeEnvironmentStringsA
WriteConsoleW
GlobalMemoryStatus
SetFilePointer
GetNumberFormatA
EnterCriticalSection
CreateThread
TlsGetValue
SetEndOfFile
lstrcpynA
GetEnvironmentVariableA
GetCurrentProcess
lstrcatA
GetCPInfo
TlsSetValue
GlobalReAlloc
FileTimeToLocalFileTime
FindFirstFileA
RtlUnwind
ExitProcess
GetStdHandle
OpenProcess
FileTimeToSystemTime
ExpandEnvironmentStringsA

msvcrt

wcstod
_ultow
_isnan
_flushall
_wpgmptr
modf
__getmainargs
_except_handler3
strcspn
_set_sbh_threshold
_wstati64
_aligned_malloc
fread
_chdir
_lock
strtol
fopen
_global_unwind2
_controlfp
_ismbblead
_mbctokata
mbtowc
wcstombs
wctomb
_wstat
perror
_wsearchenv
ferror
_chgsign
_set_SSE2_enable
_tolower
_pipe
_unloaddll
_fpclass
_atodbl
_wchmod
isxdigit
_wrename
_environ
_futime64
_getw
putwchar
__p__fmode
_aexit_rtn
_locking
_ui64toa
_fileinfo
_mbsnbcnt
_sleep
mktime
_getche
_beginthreadex
_snwscanf
_strtoui64
_exit
system
_adj_fprem1
_snprintf
_wchdir
_ismbcl0
_mbsncat
iscntrl
fwscanf
strtok
memcpy
sinh
_wcmdln
abort
__set_app_type
_putw
_strcmpi
_XcptFilter
__setusermatherr
wcscspn
_strnicoll
__p__commode
wcstoul
_mbsicoll
floor
_aligned_realloc
_fstat64
vsprintf
_endthreadex
_execlp
mblen
vfprintf
clearerr
_adjust_fdiv
_cwscanf
_acmdln
exit
_beep
_getdrive
localeconv
strerror
_initterm
sscanf

gdi32

GetStockObject
CreateRectRgnIndirect
SetROP2
Rectangle
RestoreDC
SetBkColor
CreateSolidBrush
MoveToEx
ExtTextOutA
GetObjectA
SelectClipRgn
CreateCompatibleDC
SelectObject
Polyline
DeleteDC
EndDoc
CreateDIBSection
SetTextAlign
GetDeviceCaps
LineTo
CreateRectRgn
GetBkColor
SetTextColor
DeleteObject
StartDocA
CreatePen
RectInRegion
SaveDC
BitBlt
GetBkMode
CreateFontIndirectA
CreateCompatibleBitmap
StartPage
SetBkMode
SetMapMode
GetTextMetricsA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6bdfb1ee1811abcdfee7b41ac43efc8

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

gdi32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 512B - Virtual size: 132B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 512B - Virtual size: 132B

.rsrc
Size: 4KB - Virtual size: 3KB