d6fb6188cbc624bf6459125e5e21f38a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d6fb6188cbc624bf6459125e5e21f38a_JaffaCakes118
Size

115KB
MD5

d6fb6188cbc624bf6459125e5e21f38a
SHA1

03dd5f44a2c82fb309cb94816c3e4f2cd33d0636
SHA256

854afce17c436050b58de04d99a7ea4f59d891b0a3840b18919848d9fdcf6ab4
SHA512

f6ab589365a5df0269a1586c3d1fb3f812d4cd975e016f636a499e69fbde1e28fcc022c46182a9dddb420172b37dc9e23cb50f3feabaa631bf5b1889cd45e722
SSDEEP

1536:6Cc5uB+iAbUZXcaa0+ZX6u4frgBj1wMSXRPBRg8aTrwFCHf1eeNfh:6hEZNa0gKu4frgBCXvRgrA81eeN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6fb6188cbc624bf6459125e5e21f38a_JaffaCakes118

Files

d6fb6188cbc624bf6459125e5e21f38a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7da4e273889abe9595978f4a832544e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
ChildWindowFromPoint
SetParent
GetClientRect
BeginPaint
GetKeyboardLayoutNameA
GetScrollPos
GetWindowLongW
GetIconInfo
GetKeyNameTextA
GetDC
PostQuitMessage
TranslateMDISysAccel
InflateRect
UnhookWindowsHookEx
TrackPopupMenu
MapWindowPoints
TranslateMessage
GetClassInfoA
GetWindowTextA
GetFocus
PeekMessageW
EnumThreadWindows
SetWindowTextA
CheckMenuItem
RemoveMenu
SetScrollRange
SystemParametersInfoA
InvalidateRect
DispatchMessageW
UpdateWindow
DispatchMessageA
WaitMessage
GetCursorPos
ShowWindow
IsWindowVisible
IsIconic
DrawFrameControl
GetKeyboardType
SendMessageA
PtInRect
AdjustWindowRectEx
GetKeyboardLayoutList
SetCursor
ShowOwnedPopups
GetMenu
CharNextW
IsZoomed
GetKeyboardLayout
DefWindowProcA
RegisterClipboardFormatA
OemToCharA
GetWindowPlacement
GetWindowThreadProcessId
ScreenToClient
CharLowerBuffA
InsertMenuItemA
RemovePropA
IsChild
EnableScrollBar
CreatePopupMenu
MoveWindow
ReleaseCapture
LoadStringA
ClientToScreen
GetWindowLongA
SetCapture
CallNextHookEx
CharToOemA
GetWindowRect
FindWindowA
CallWindowProcA
GetClassNameA
DrawAnimatedRects
CharUpperBuffA
FrameRect
SetScrollInfo
UnregisterClassA
SetForegroundWindow
EnumWindows
GetScrollInfo
SetWindowPos
SendMessageW
RegisterClassA
SetWindowLongW
OffsetRect
DefFrameProcA
EqualRect
CreateMenu
DestroyMenu
IsDialogMessageA
ShowScrollBar
SetFocus
IsWindowEnabled
GetClassLongA
LoadCursorA
DrawIcon
GetPropA
GetSysColorBrush
GetCapture
EnumChildWindows
SetMenu
CloseClipboard
GetSubMenu
PeekMessageA
GetActiveWindow
MessageBeep
GetSystemMetrics
InsertMenuA
GetMessagePos
RedrawWindow
GetKeyState
SetRect
DrawMenuBar
MessageBoxA
IntersectRect
LoadBitmapA
SetMenuItemInfoA
MapVirtualKeyA
GetMenuItemCount
GetClipboardData
EnableMenuItem
FillRect
DeleteMenu
SetActiveWindow
EndPaint
GetWindow
GetMenuState
ScrollWindow
SetClipboardData
GetWindowDC
PostMessageA
IsWindow
CreateIcon
DestroyCursor
GetDCEx
GetSysColor
GetScrollRange
wsprintfA
SetPropA
IsDialogMessageW
DefMDIChildProcA
IsWindowUnicode
GetDlgItem
DrawEdge
KillTimer
RegisterWindowMessageA
GetParent
IsRectEmpty
EnableWindow
GetMenuItemInfoA
SetTimer
GetSystemMenu
CharNextA
OpenClipboard
GetLastActivePopup
SetWindowLongA
GetCursor
DrawTextA
DrawIconEx
GetMenuItemID
SetScrollPos
GetTopWindow
GetDesktopWindow
GetMenuStringA
DestroyIcon
GetKeyboardState
DestroyWindow
CharLowerA
SetClassLongA
MsgWaitForMultipleObjects

kernel32

GetSystemDefaultLangID
GetOEMCP
HeapFree
VirtualQuery
VirtualAlloc
GetACP
FindFirstFileA
GetLocalTime
VirtualAllocEx
SetEndOfFile
CreateFileA
CreateThread
FormatMessageA
ReadFile
FreeLibrary
LocalFree
LoadResource
ExitProcess
GetDateFormatA
LoadLibraryA
GetThreadLocale
GetFileAttributesA
GlobalAddAtomA
lstrlenA
MoveFileExA
GetLastError
GetLocaleInfoA
ExitThread
FindClose
GetTickCount
MoveFileA
GetEnvironmentStrings
GetModuleFileNameA
GetStringTypeW
CloseHandle
lstrcmpiA
GetFileSize
GlobalAlloc
GetProcAddress
GlobalFindAtomA
MulDiv
EnumCalendarInfoA
SetThreadLocale
WaitForSingleObject
EnterCriticalSection
GetCurrentThread
GlobalDeleteAtom
CreateEventA
SetErrorMode
SetFilePointer
SetHandleCount
GetVersion
DeleteFileA
SetEvent
SetLastError
LocalReAlloc
lstrcmpA
GetCPInfo
FreeResource
lstrcpynA
GetProcessHeap
RaiseException
GetCurrentProcess
GetStdHandle
GetFileType
CompareStringA
GetStringTypeA
Sleep
DeleteCriticalSection
lstrcpyA
LoadLibraryExA
FindResourceA
GetStartupInfoA
VirtualFree
InitializeCriticalSection
GetCurrentThreadId
SizeofResource
WriteFile
ResetEvent
GetCommandLineA
LocalAlloc
HeapAlloc
GetModuleHandleA
GetFullPathNameA
LockResource

msvcrt

memcpy
cos

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7da4e273889abe9595978f4a832544e4

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

Sections

CODE Size: 102KB - Virtual size: 101KB

BSS Size: 7KB - Virtual size: 6KB

.edata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 385B

CODE
Size: 102KB - Virtual size: 101KB

BSS
Size: 7KB - Virtual size: 6KB

.edata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 385B