b1963b7eaa3af0600a1a0d260a4ec05b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b1963b7eaa3af0600a1a0d260a4ec05b_JaffaCakes118
Size

323KB
MD5

b1963b7eaa3af0600a1a0d260a4ec05b
SHA1

6ebb6c6d37cdfb92f5747b21cc80ed54a5d6698a
SHA256

fb2c87f70867bc7c45582f4013e4cf7bdb0bc68bb52f668b28f3c40ca1c3a966
SHA512

292319f8951240026e773b4741d396a4cf820cea088bf5d19acf5801e358947288522b10c5e2d25f11e8d1a2d22504c18b01fd2ebfcf07b1313c2289c57d3668
SSDEEP

6144:N7EA4IOXMzU05KYha5iI/oj6M1agFvSOePnG9H8nQ86cR0kFypQhH:N7ETXMz55bXRj6HyvaG9H8nQ86cRhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1963b7eaa3af0600a1a0d260a4ec05b_JaffaCakes118

Files

b1963b7eaa3af0600a1a0d260a4ec05b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2641baaa4071df38bf3516114843186b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

iswctype
fopen
fprintf
fclose
wcstol
_ltow
memmove
wcschr
_splitpath
_snprintf
sprintf
_except_handler3
_wmakepath
_close
_snwprintf
wcsncat
_open
_wstat
_stat
_winmajor
memset
_access
_wfullpath
_fullpath
strcmp
_errno
swprintf
calloc
wcsncmp
_wcsnicmp
wcscpy
wcsrchr
wcscat
_wsplitpath
wcslen
free
malloc
_wopen
_waccess
wcscmp
_wcsicmp
wcsncpy

comctl32

PropertySheetW
ImageList_ReplaceIcon
ImageList_Create
PropertySheetA

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetMalloc
SHChangeNotify
SHGetDesktopFolder

user32

IsDlgButtonChecked
CheckDlgButton
LoadBitmapA
DispatchMessageA
GetMessageA
GetWindow
FindWindowExA
ReleaseDC
CharUpperBuffW
FindWindowA
GetActiveWindow
wsprintfA
DialogBoxParamA
PostQuitMessage
CountClipboardFormats
DialogBoxParamW
EndDialog
SetFocus
OffsetRect
ShowWindow
PostMessageA
GetInputState
LoadMenuA
IsWindow
LoadStringW
LoadStringA
SetWindowTextW
SetWindowTextA
GetWindowTextW
GetWindowTextA
MessageBoxW
LoadIconA
EnableWindow
CreateWindowExA
SendMessageA
RegisterClassExA
DefWindowProcA
LoadCursorA
GetClipboardOwner
GetForegroundWindow
GetDoubleClickTime
GetFocus
SetCursor
GetClipboardSequenceNumber
GetDlgItem
EnumWindows
TranslateMessage
SetWindowLongA
SendMessageW
GetWindowLongA
MessageBoxA
GetDesktopWindow
GetClipboardViewer
GetDlgCtrlID
GetCapture
GetParent
GetWindowRect
GetCaretBlinkTime
GetSystemMetrics
MoveWindow

ole32

CoCreateInstance
CoInitialize
CoUninitialize

kernel32

GetCurrentProcessId
TlsSetValue
GetLogicalDrives
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
GetTickCount
TerminateProcess
OpenMutexA
InterlockedExchange
GetSystemTimeAsFileTime
OpenEventW
CloseHandle
FindFirstFileA
InterlockedCompareExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
GetThreadLocale
FindNextFileA
GetProcessHeap
GetDateFormatA
GetTempFileNameA
LocalFree
CreateEventA
DisableThreadLibraryCalls
GetModuleFileNameA
FindResourceA
DeleteCriticalSection
GetVersionExA
InterlockedDecrement
HeapCreate
TlsFree
GetOEMCP
InitializeCriticalSection
HeapFree
SetFileAttributesA
GetStdHandle
lstrcpynW
VerLanguageNameW
VerLanguageNameA
WaitForSingleObjectEx
CreateSemaphoreW
SetErrorMode
EnterCriticalSection
FindResourceW
GlobalFree
GetVersion
SetLastError
SetFilePointer
LeaveCriticalSection
GetPrivateProfileStringW
GetPrivateProfileStringA
GetCommandLineA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
GetUserDefaultUILanguage
IsDebuggerPresent
WritePrivateProfileStringW
FormatMessageW
WritePrivateProfileStringA
ReadFile
GetTempPathW
TlsAlloc
ResetEvent
GetTempPathA
GetSystemDirectoryW
PulseEvent
GetSystemDirectoryA
GetCurrentProcess
GetProfileStringW
GlobalMemoryStatusEx
GetProfileStringA
AreFileApisANSI
LoadLibraryExW
LoadLibraryExA
GetLastError
WriteFile
HeapAlloc
OutputDebugStringW
CreateThread
GetLogicalDriveStringsW
FindFirstFileW
FindNextFileW
GetAtomNameA
GetUserDefaultLangID
FindClose
LoadLibraryA
GetACP
GetProcAddress
FreeLibrary
AddAtomA
lstrlenW
GetModuleHandleA
WideCharToMultiByte
CreateFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
CreateFileA

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegDeleteValueW
RegSetValueExA
RegSetValueExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegDeleteKeyA
RegDeleteKeyW
RegQueryValueExA
RegQueryValueExW
RegEnumValueA
RegEnumValueW
RegEnumKeyExA
RegEnumKeyExW
RegCloseKey

comdlg32

GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA

Sections

.text
Size: 93KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 198KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2641baaa4071df38bf3516114843186b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

comctl32

shell32

user32

ole32

kernel32

advapi32

comdlg32

version

Sections

.text Size: 93KB - Virtual size: 95KB

.data Size: 198KB - Virtual size: 262KB

.bss Size: - Virtual size: 14KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 95KB

.data
Size: 198KB - Virtual size: 262KB

.bss
Size: - Virtual size: 14KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 4KB - Virtual size: 4KB