bef1abce85ccc677e7651c05968dcc86_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bef1abce85ccc677e7651c05968dcc86_JaffaCakes118
Size

171KB
MD5

bef1abce85ccc677e7651c05968dcc86
SHA1

cdaa8f78ffe6f4608e43aff9c3b00b33d972de4b
SHA256

e6d22df68c1e183a4f6f58cdfb502d4ed6ef9675b2f4456da59c3341a9fccafc
SHA512

b4435d385a38fa2d96c381218acad3425ee163353b9bc3c9b655303f4741a7b2b42b68d0cab733b75aa75769cedbb36a897b2ee63f3b6f74c75ec393991f90f5
SSDEEP

3072:neG0xs1Tk1rGa+gAI6eQ6/Bh2ZAmdgjAjWhc6JWtB7PMwRT6Eh8en:eGgoTk1F+CVQ6/zkAmCcjWstNLThb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bef1abce85ccc677e7651c05968dcc86_JaffaCakes118

Files

bef1abce85ccc677e7651c05968dcc86_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8b5475a5bd13554a0f4907518752aac2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefDlgProcW
CreateWindowExA
InsertMenuItemW
CharLowerA
CheckRadioButton
FillRect
OpenDesktopW
CreateIconIndirect
LoadIconA
VkKeyScanW
DestroyCaret
BeginDeferWindowPos
AppendMenuW
GetLastActivePopup
DefFrameProcW
ShowScrollBar
GetMenuCheckMarkDimensions
IsRectEmpty
ClientToScreen
GetUpdateRgn
UpdateWindow
SendNotifyMessageW
OffsetRect
RegisterClassExA
SendMessageTimeoutW
ActivateKeyboardLayout
FindWindowExW
GetClassInfoA
GetSystemMetrics
IsMenu
SetClassLongW
LoadIconW
SetLastErrorEx
GetNextDlgTabItem
FrameRect
MessageBoxW
SwitchToThisWindow
ShowWindowAsync
wvsprintfA
SetMenuItemBitmaps
DrawStateW
OemToCharBuffA
GetIconInfo
InvalidateRgn
LoadCursorA
PostThreadMessageW
PeekMessageW
SetCursor
EnableScrollBar
GetActiveWindow
InvalidateRect
GetWindowTextLengthW
SendDlgItemMessageA
SetMenu
wsprintfA
GetDlgItemTextW
DrawStateA
CallWindowProcA
LoadCursorW
CreateDialogIndirectParamW
LoadBitmapA
MapVirtualKeyExW
GetMessageExtraInfo
ToUnicodeEx
GrayStringW
UnionRect
wsprintfW
GetKeyboardLayoutList
SetWindowPos
DrawFrameControl
IntersectRect
GetDesktopWindow
IsWindow
IsZoomed
CreateIconFromResource
keybd_event
BeginPaint
CheckMenuRadioItem
CharNextExA
EnumChildWindows
GetClassLongA
CopyRect
GetDlgItem
GetMenu
ChildWindowFromPoint
GetMenuItemID
MonitorFromPoint
UnloadKeyboardLayout
InternalGetWindowText
GetDCEx
DefWindowProcW
PostQuitMessage
CloseDesktop
RemovePropW
SetWindowLongW
GetClassInfoW
SetWindowTextA
DrawAnimatedRects
GetMenuItemRect
RegisterWindowMessageW
DialogBoxIndirectParamW
CharNextA
IsDialogMessageA
DrawTextA
DefFrameProcA
SetMenuItemInfoW
ShowCursor
MapVirtualKeyA
SendMessageTimeoutA
SetTimer
DeferWindowPos
DrawMenuBar
ReplyMessage
ScrollWindow
AdjustWindowRectEx
CharPrevW
SetDlgItemTextW
GetUserObjectInformationA
GetClassLongW
FindWindowA
GetScrollInfo
WaitForInputIdle
EndDialog
SetRect
InSendMessage
GetDlgItemInt
EnumWindows
ExitWindowsEx
InflateRect
DrawTextExW
EqualRect
EndTask
GetNextDlgGroupItem
GetDC
ScrollWindowEx
IsCharUpperA
IsCharLowerA
GetCaretPos
SetFocus
BringWindowToTop
AdjustWindowRect
ShowCaret
DispatchMessageW
GetMessagePos
DialogBoxIndirectParamA
GetSysColorBrush
HideCaret
MessageBoxExA
SetWindowTextW
TrackPopupMenuEx
PeekMessageA
DestroyIcon
CreateAcceleratorTableW
GetDialogBaseUnits
LoadMenuA
GetWindowTextW
GetWindowDC
EndPaint
GetCursorPos
LoadMenuW
CharNextW
GetMenuStringA
InSendMessageEx
KillTimer
LoadStringA

comdlg32

GetSaveFileNameA
GetFileTitleW
GetSaveFileNameW
PrintDlgExW
GetOpenFileNameW
PrintDlgW
GetOpenFileNameA

kernel32

GlobalAddAtomW
GetCommConfig
GetCurrentThreadId
GlobalLock
CreatePipe
CreateDirectoryA
TryEnterCriticalSection
VirtualQuery
HeapUnlock
GetStartupInfoW
EnterCriticalSection
GetFileAttributesA
UnhandledExceptionFilter
GetAtomNameA
lstrcatA
HeapValidate
GetCommState
GlobalGetAtomNameA
ConnectNamedPipe
OpenFileMappingW
TerminateThread
SetThreadLocale
TlsFree
GetComputerNameA
GetFileAttributesExW
DeleteAtom
SetErrorMode
GlobalReAlloc
SearchPathA
GetLongPathNameW
DuplicateHandle
CopyFileW
GetModuleHandleA
VerifyVersionInfoW
ExitThread
GlobalDeleteAtom
EnumSystemLocalesA
LocalAlloc
FindResourceExW
FindFirstChangeNotificationW
GetPriorityClass
VirtualAlloc
IsValidLanguageGroup
EnumResourceNamesA
GetThreadTimes
GetProcAddress
FormatMessageA
GetTimeFormatA
GetCompressedFileSizeW
UnmapViewOfFile
lstrcmpA
GetCommModemStatus
SetThreadExecutionState
OpenEventW
CreateThread
PulseEvent
MapViewOfFile
CancelIo
LockFile
GetModuleFileNameA
QueryDosDeviceW
GlobalAlloc
GetFileTime
GlobalFlags
CreateEventA
LocalReAlloc
GetDateFormatA
GetBinaryTypeA
OpenSemaphoreW
GlobalCompact
VirtualFree
OpenFile
GetUserDefaultUILanguage
MoveFileExW
GlobalMemoryStatus
SetEndOfFile

msvcrt

_controlfp
__set_app_type
putc
atol
__p__fmode
wcslen
toupper
wcstod
strcpy
atoi
__p__commode
remove
free
exit
_amsg_exit
strpbrk
fgetc
towlower
fflush
putchar
strncpy
wcscspn
_initterm
strcspn
fseek
strtol
_ismbblead
strspn
_XcptFilter
_exit
gmtime
_cexit
fgets
wcscoll
wcstol
__setusermatherr
wcscat
fread
time
calloc
qsort
strcoll
ftell
mktime
strncmp
iswprint
iswctype
perror
wcscmp
strtok
bsearch
strrchr
__getmainargs
isspace
vswprintf
isupper
iswalpha
islower
isalnum
fclose

gdi32

PtInRegion
GetNearestPaletteIndex
RestoreDC
SetBitmapDimensionEx
BitBlt
CreateDIBSection
StartDocW
CreateBitmap
EnumFontsW
GetClipBox
SetBkMode
GetDIBColorTable
SetDIBits
CombineRgn
CreatePatternBrush
GetBitmapBits
SetWindowExtEx
CreateRoundRectRgn
ResizePalette
StartPage
GetTextMetricsA
CreatePen
SetMapMode
CreatePenIndirect
SetPixel
TextOutA
EndPath
RectVisible
CreateSolidBrush
GetFontData
SelectPalette
Polyline
CreateRectRgnIndirect
CreateDiscardableBitmap
RoundRect
FillRgn
SetViewportExtEx
GetTextExtentPointW
GetCurrentObject
GetTextExtentPoint32A
PolyBezier
Polygon
SetBkColor
CreateHalftonePalette
GetObjectW
PatBlt
GetTextCharsetInfo
SetDIBitsToDevice
LineTo
SetDIBColorTable
GetPaletteEntries
SetROP2
MoveToEx
CreatePalette
GetTextExtentExPointW
SetWindowOrgEx
GetWindowOrgEx
GetTextMetricsW
ExtTextOutA
ExcludeClipRect
EndDoc
GetTextColor
SetRectRgn
RealizePalette
TextOutW
ExtTextOutW
DeleteDC
GetSystemPaletteUse
SetAbortProc

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dust
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tmp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ins
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b5475a5bd13554a0f4907518752aac2

Headers

File Characteristics

Imports

user32

comdlg32

kernel32

msvcrt

gdi32

Sections

.text Size: 119KB - Virtual size: 118KB

.dust Size: 512B - Virtual size: 28B

.tmp Size: 1KB - Virtual size: 1KB

.data Size: 50KB - Virtual size: 49KB

.ins Size: - Virtual size: 19KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 119KB - Virtual size: 118KB

.dust
Size: 512B - Virtual size: 28B

.tmp
Size: 1KB - Virtual size: 1KB

.data
Size: 50KB - Virtual size: 49KB

.ins
Size: - Virtual size: 19KB

.reloc
Size: 2KB - Virtual size: 2KB