dc66f772a9faa987ad3a03411a314283_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dc66f772a9faa987ad3a03411a314283_JaffaCakes118
Size

213KB
MD5

dc66f772a9faa987ad3a03411a314283
SHA1

dcee94f7c5c60385d7d554dc78538f8eb253a199
SHA256

53da44da077d2682694482b5d5485fb7b0caddda2b79195ead35f7cbbc945ae4
SHA512

3c2d16023e0b28ac3f5a3ba98888a0a6d83d56e73450d4953be865c998b274b20abab28b46670231e55e990cf33191f21de34ef5e49d252dc1b943e01258bd1e
SSDEEP

3072:z0K23uSBiL5bTldHekjEWb7ASnPeFDUvHR1EWTsKNZ8u2L:A0SBiNlYkY+ASnG5Un3I+Z8u4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc66f772a9faa987ad3a03411a314283_JaffaCakes118

Files

dc66f772a9faa987ad3a03411a314283_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bd462b6f0167f5e2a2326be9eceda6b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCaretPos
DrawAnimatedRects
GetMonitorInfoW
GetSysColorBrush
SetTimer
RemoveMenu
FindWindowExA
DestroyCaret
IsDialogMessageW
BeginDeferWindowPos
GetAsyncKeyState
HiliteMenuItem
GetDCEx
CreateDialogParamW
IsMenu
UnionRect
DialogBoxParamA
GetWindowLongA
CharNextExA
MapVirtualKeyA
InsertMenuW
LoadMenuA
InvalidateRect
DrawTextA
PostThreadMessageA
RegisterWindowMessageA
PeekMessageW
GetScrollInfo
DrawStateA
SystemParametersInfoW
VkKeyScanW
GetWindowDC
DispatchMessageW
AppendMenuA
GetShellWindow
CopyAcceleratorTableW
GetClientRect
CreateDialogParamA
ScrollWindow
ChildWindowFromPointEx
IsDlgButtonChecked
CreateWindowExW
GetClassInfoExW
EnableWindow
MoveWindow
GetMessageA
ChangeMenuW
IsWindowVisible
LoadAcceleratorsW
GetCursorPos
ReplyMessage
WaitForInputIdle
GetWindow
DestroyAcceleratorTable
AttachThreadInput
CharToOemW
LoadAcceleratorsA
SendDlgItemMessageA
ModifyMenuW
CallWindowProcA
InvertRect
GetWindowPlacement
InvalidateRgn
InSendMessage
ScrollWindowEx
GetDesktopWindow
GetWindowRect
CascadeWindows
CallWindowProcW
GetWindowLongW
RegisterClassExW
MonitorFromPoint
DefWindowProcW
MapVirtualKeyW
GetParent
CharUpperBuffW
EnableScrollBar
CreateDialogIndirectParamW
SendMessageTimeoutA
CharToOemBuffA
SendMessageTimeoutW
OpenInputDesktop
CreatePopupMenu
UpdateWindow
LoadImageA
ClientToScreen
GetClassLongA
RegisterClassW
GetDlgItemInt
CreateWindowExA
GetActiveWindow
InSendMessageEx
IsChild
DeferWindowPos
CharNextA
LoadImageW
SetWindowTextW
SendInput
CharLowerA
IsCharAlphaW
FindWindowA
LoadMenuW
ShowCursor
DefFrameProcW
CharPrevW
CharLowerW
GetCaretPos
LookupIconIdFromDirectory
IsRectEmpty
SetWindowTextA
CharUpperW
SetRectEmpty
DialogBoxIndirectParamA

msvcrt

wcscat
ftell
vswprintf
wcscpy
mbtowc
iswprint
_controlfp
isprint
strcspn
wcsrchr
__set_app_type
wcstol
__p__fmode
strstr
__p__commode
getenv
iswxdigit
_amsg_exit
iswctype
mbstowcs
strncmp
wcscoll
_initterm
tolower
wcscspn
towupper
printf
strcpy
_ismbblead
wcspbrk
realloc
sprintf
_XcptFilter
_exit
qsort
swscanf
wcstod
free
_cexit
wcscmp
__setusermatherr
strtoul
__getmainargs
gmtime

kernel32

GetTempFileNameW
GetVersionExA
GetFullPathNameW
GetUserDefaultLangID
TryEnterCriticalSection
LCMapStringA
HeapReAlloc
lstrcmpiA
GetCurrentProcessId
FoldStringW
TlsGetValue
GetFileAttributesExW
IsValidLanguageGroup
LoadResource
IsBadReadPtr
FlushViewOfFile
CreateFileA
GetModuleHandleW
GetSystemTimeAdjustment
AddConsoleAliasA
SetThreadPriority
PulseEvent
GetCurrentThread
SystemTimeToFileTime
CreateMutexW
LocalUnlock
CreateSemaphoreA
lstrcmpW
FindCloseChangeNotification
LockFile
GetSystemDirectoryW
FileTimeToSystemTime
SetCommBreak
lstrcpynW
ReleaseSemaphore
FreeLibrary
GetDateFormatW
GetTempPathW
GetThreadLocale
VerSetConditionMask
AddAtomA
LoadLibraryW
SetCommMask
ClearCommError
GetUserDefaultLCID
LocalAlloc
VirtualProtect
GetSystemInfo
WideCharToMultiByte
SetLastError
DeleteFileW
RegisterWaitForSingleObject
LocalLock
LoadLibraryA

gdi32

SetViewportOrgEx
RectInRegion
CreateFontIndirectA
DeleteDC
TextOutA
GetObjectW
CreateFontA
SetPixel
DeleteObject
GetPixel
SetDIBitsToDevice
GetFontData
SetBrushOrgEx
SelectClipRgn
ModifyWorldTransform
RoundRect
Polyline
RealizePalette
SetBitmapDimensionEx
EnumFontFamiliesW
CreateICW
SelectObject
TextOutW
GetStockObject
SetMapMode
DPtoLP
GetTextExtentPoint32A
EndDoc
SetDIBColorTable
CreateRoundRectRgn
ExtFloodFill
LineDDA
AddFontResourceW
IntersectClipRect
SetWindowExtEx
GetObjectA
StartDocW
ExtTextOutA
UnrealizeObject
Escape
TranslateCharsetInfo
GetCharWidth32W
CreateDIBSection
GetTextMetricsA
SetBkMode
GetPaletteEntries
FillRgn
PatBlt

Exports

Exports

?ValidateProcess@@YGHH<V

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd462b6f0167f5e2a2326be9eceda6b9

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

gdi32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 87KB

.data Size: 121KB - Virtual size: 183KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 88KB - Virtual size: 87KB

.data
Size: 121KB - Virtual size: 183KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB