d1bed67c1457a194d4b4d59c37a63573_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d1bed67c1457a194d4b4d59c37a63573_JaffaCakes118
Size

180KB
MD5

d1bed67c1457a194d4b4d59c37a63573
SHA1

34ceb73b53b4256c1af8697f3acb4b2f7a816d89
SHA256

8919fae5c7712ed795a651a2dbb9e352a083789e6e00f425b7ede597c2ef1438
SHA512

c7647d008950d4e4e85c1db0735e9a0fd90bba2570a0be74eb54d0e385426b9a1e39e6c55211f149dddfce929c334c8514abd3fc572fa091be7eee5c53f9656f
SSDEEP

3072:r1jvMLfZZCuOKRsk0AT5M0y+4NnKBG4cOhBRAzsRSHB1Lg:r1wLfuz61T5XydnKBGIbTRM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1bed67c1457a194d4b4d59c37a63573_JaffaCakes118

Files

d1bed67c1457a194d4b4d59c37a63573_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f1d9285a1274a1d7d74567dbfe80611

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fabs
srand
memmove
memcpy
calloc
log
wcsncmp

kernel32

CompareStringA
CreateThread
ExitThread
FindResourceA
CloseHandle
GetDateFormatA
VirtualFree
GetDiskFreeSpaceA
HeapFree
GetSystemDefaultLangID
GetUserDefaultLCID
GetStringTypeA
GetProcAddress
GetOEMCP
FreeLibrary
GetCPInfo
LoadLibraryExA
Sleep
GetThreadLocale
GetEnvironmentStrings
GetFileSize
ResetEvent
SetFilePointer
LocalFree
lstrcpynA
GetStringTypeW
GetCommandLineA
CreateEventA
VirtualQuery
VirtualAlloc
FindClose
VirtualAllocEx
LoadLibraryA
LocalAlloc
GetCurrentProcess
MulDiv
ExitProcess
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
lstrcatA
EnumCalendarInfoA
GlobalDeleteAtom
HeapDestroy
LoadResource
LocalReAlloc
WriteFile
lstrcpyA
ReadFile
FindFirstFileA
SetEvent
RaiseException
GetLastError
GlobalAlloc
GetVersionExA
GetCurrentProcessId
GetFileAttributesA
GetFullPathNameA
GetFileType
HeapAlloc
GetCurrentThreadId
GetTickCount
FormatMessageA
GetLocalTime
GlobalAddAtomA
MoveFileExA
SetLastError
DeleteCriticalSection
CreateFileA
DeleteFileA
SetEndOfFile
lstrcmpA
GetModuleHandleA
InitializeCriticalSection
lstrcmpiA
SetThreadLocale
FreeResource
GlobalFindAtomA
MoveFileA
GetLocaleInfoA
GetVersion
SetHandleCount
GetACP
WaitForSingleObject
GetStartupInfoA
lstrlenA
GetCurrentThread

user32

SetFocus
CharLowerA
KillTimer
DrawIconEx
IsRectEmpty
LoadStringA
EnumChildWindows
UpdateWindow
DefMDIChildProcA
GetClientRect
GetScrollPos
DrawEdge
FrameRect
IsWindow
GetSystemMetrics
DestroyCursor
GetScrollInfo
InsertMenuA
SetPropA
OemToCharA
SetWindowPos
CheckMenuItem
OpenClipboard
GetSysColorBrush
RemoveMenu
EndPaint
UnregisterClassA
GetMenuStringA
DrawAnimatedRects
GetWindowTextA
TranslateMDISysAccel
GetMessagePos
CallWindowProcA
CreateMenu
IsIconic
EnumThreadWindows
GetKeyboardLayoutNameA
GetMenuItemID
DestroyMenu
ShowOwnedPopups
CallNextHookEx
PeekMessageA
GetWindowDC
GetLastActivePopup
MsgWaitForMultipleObjects
GetClipboardData
SetScrollInfo
SetMenu
EnableWindow
RedrawWindow
GetDC
CharLowerBuffA
LoadKeyboardLayoutA
WindowFromPoint
GetKeyboardType
IsWindowEnabled
GetWindowLongA
GetTopWindow
WaitMessage
RegisterClipboardFormatA
SetWindowPlacement
GetActiveWindow
IsChild
CreatePopupMenu
ActivateKeyboardLayout
SetCursor
IsWindowVisible
SetWindowLongA
GetCursorPos
IsWindowUnicode
GetKeyboardLayout
DrawFrameControl
OffsetRect
ScrollWindow
GetMenuState
SendMessageA
AdjustWindowRectEx
ScreenToClient
GetDCEx
GetPropA
GetSystemMenu
InvalidateRect
ShowWindow
CharUpperBuffA
SetWindowsHookExA
CharToOemA
PeekMessageW
GetWindow
MessageBoxA
SetParent
DefWindowProcA
CharNextW
IsDialogMessageA
TrackPopupMenu
SetClassLongA
CreateWindowExA
EnumWindows
MoveWindow
SetCapture
RegisterWindowMessageA
GetClassInfoA
PostMessageA
CloseClipboard
DefFrameProcA
DispatchMessageW
GetForegroundWindow
GetMenuItemCount
DestroyWindow
RegisterClassA
SetClipboardData
PostQuitMessage
UnhookWindowsHookEx
EqualRect
IsZoomed
GetParent
DestroyIcon
GetClassLongA
FillRect
MessageBeep
RemovePropA
LoadIconA
ReleaseDC
MapVirtualKeyA
GetScrollRange
GetWindowRect
GetMenuItemInfoA
TranslateMessage
SetMenuItemInfoA
DrawMenuBar
ClientToScreen
GetSubMenu
GetKeyNameTextA
LoadCursorA
GetIconInfo
BeginPaint
GetKeyboardState
ShowScrollBar
GetCapture
EmptyClipboard
GetKeyboardLayoutList
LoadBitmapA
GetClassNameA
GetMenu
InflateRect
GetWindowLongW
InsertMenuItemA
GetDlgItem
GetKeyState
EnableScrollBar
GetWindowThreadProcessId
SystemParametersInfoA
SendMessageW
SetScrollRange
GetCursor
MapWindowPoints
SetScrollPos
DispatchMessageA
EnableMenuItem
SetRect
GetWindowPlacement
DeleteMenu
GetFocus
wsprintfA
GetSysColor
IntersectRect
SetForegroundWindow
ReleaseCapture
DrawIcon
FindWindowA
CreateIcon
IsDialogMessageW

comctl32

ImageList_Create
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx

advapi32

RegLoadKeyA
RegQueryValueExA
RegEnumKeyA
RegCreateKeyA

Sections

CODE
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f1d9285a1274a1d7d74567dbfe80611

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

comctl32

advapi32

Sections

CODE Size: 168KB - Virtual size: 167KB

.rdata Size: 7KB - Virtual size: 103KB

.data Size: 2KB - Virtual size: 2KB

.edata Size: 1KB - Virtual size: 1KB

CODE
Size: 168KB - Virtual size: 167KB

.rdata
Size: 7KB - Virtual size: 103KB

.data
Size: 2KB - Virtual size: 2KB

.edata
Size: 1KB - Virtual size: 1KB