ea50a7877aa4ec066b3950f6ebc8baca_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ea50a7877aa4ec066b3950f6ebc8baca_JaffaCakes118
Size

206KB
MD5

ea50a7877aa4ec066b3950f6ebc8baca
SHA1

31fc600e89e2d865e5fc262ba1b65c98e170f737
SHA256

4d8c59169514346d441d83cbbe2b758207539dac06d5839ad1ce22e1e15b3d6f
SHA512

937b9dfd52c633a36be9012382f24d6d30329479bdeb0d8f6b876b2de4aa2a811413ca5f440fdeacfda8da8fd0cc4ddd882ebfe70600c110c32f688a3d27aac1
SSDEEP

6144:nY7MYUD2h92NgvDaHSir3Q9APiEjpuw22:PDE2ODaHSi3tjpxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea50a7877aa4ec066b3950f6ebc8baca_JaffaCakes118

Files

ea50a7877aa4ec066b3950f6ebc8baca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6adc48a3c8906a24a182b661a583b30d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetRectEmpty
CallWindowProcA
DestroyCursor
GetAsyncKeyState
SwitchToThisWindow
ShowWindow
UnionRect
IsCharAlphaW
IsWindowEnabled
DialogBoxIndirectParamA
DispatchMessageW
FindWindowA
CreateDialogParamW
GetMessageExtraInfo
GetWindowRect
GetCaretPos
CallWindowProcW
CharPrevW
IsZoomed
wvsprintfA
DispatchMessageA
MoveWindow
GetMenuItemRect
TrackPopupMenuEx
RegisterWindowMessageW
DrawStateA
InvalidateRect
SendMessageTimeoutA
SetPropW
RemoveMenu
LoadAcceleratorsW
ScrollWindow
GetWindowLongA
EnableWindow
MonitorFromPoint
ChildWindowFromPointEx
ModifyMenuW
LoadImageA
CascadeWindows
GetActiveWindow
LookupIconIdFromDirectory
CharToOemBuffA
PeekMessageW
ShowCursor
GetSystemMetrics
GetDlgItemInt
SendDlgItemMessageA
BeginPaint
GetClassInfoExW
DestroyAcceleratorTable
GetWindowPlacement
DestroyCaret
CreateDialogParamA
SendInput
LoadImageW
AttachThreadInput
LoadStringW
GetWindow
GetForegroundWindow
ScrollWindowEx
DeferWindowPos
DefWindowProcW
RemovePropW
CheckMenuItem
AppendMenuA
GetWindowLongW
GetFocus
UpdateWindow
BeginDeferWindowPos
CreatePopupMenu
MapVirtualKeyExW
SetTimer
CreateWindowExW
DrawFrameControl
CopyAcceleratorTableW
GetLastActivePopup
CharLowerW
GetCursorPos
SetCaretPos
SetParent
ClientToScreen
DefWindowProcA
CharUpperBuffW
IsChild
GetSubMenu
TileWindows
LoadMenuA
GetShellWindow
LoadCursorA
ReplyMessage
GetDesktopWindow
RedrawWindow
GetMessageTime
WaitForInputIdle
GetClientRect
GetDCEx
RegisterClassExW
wsprintfA
IsDialogMessageW
EnumThreadWindows
CharPrevA
CreateWindowExA
ChangeMenuW
DrawStateW
PostThreadMessageA
CharNextA
SetMenuDefaultItem
GetMenuStringW
RegisterClassW
TranslateAcceleratorW
DrawEdge

msvcrt

strtoul
clearerr
_controlfp
remove
fseek
__set_app_type
localtime
atoi
perror
strncmp
strrchr
wcscspn
putc
__p__fmode
wcscmp
__p__commode
tolower
_amsg_exit
fgetc
_initterm
wcstombs
wcscoll
_ismbblead
isxdigit
fgets
_XcptFilter
putchar
iswalpha
strpbrk
realloc
_exit
fputc
_cexit
free
strcpy
__setusermatherr
isalnum
toupper
islower
strtok
sscanf
wcslen
__getmainargs
vswprintf

gdi32

GetRgnBox
Escape
GetTextExtentPointA
StretchDIBits
CreateFontW
GetPaletteEntries
GetLayout
CreateHalftonePalette
Polyline
CreateDCW
SetViewportExtEx
CreateBitmapIndirect
GetTextCharsetInfo
CreateBrushIndirect
ResizePalette
SetRectRgn
RectVisible
GetPixel
SelectPalette
GetROP2
SetBkMode
CreateRectRgnIndirect
SetStretchBltMode
GetNearestPaletteIndex
SetDIBColorTable
GetTextExtentPointW
SetWindowOrgEx
EndPath
LineTo
Ellipse
CreatePolygonRgn
AddFontResourceA
DeleteDC
OffsetViewportOrgEx
LineDDA
SetDIBitsToDevice
CreateCompatibleDC
GetDIBits
FillRgn
ExtFloodFill
SetTextColor
CreateFontIndirectW
PatBlt
SelectClipRgn
CreatePalette
GetObjectW
CreateDIBitmap
TranslateCharsetInfo

kernel32

MultiByteToWideChar
FreeLibrary
Sleep
GetUserDefaultUILanguage
CreateWaitableTimerW
MoveFileA
SetFileTime
CreateRemoteThread
CreateNamedPipeW
VerifyVersionInfoW
DeleteAtom
OpenFile
CreateSemaphoreW
GetCommModemStatus
IsDBCSLeadByteEx
ReleaseSemaphore
IsBadCodePtr
lstrcmpW
SetSystemTime
AddAtomA
FormatMessageA
GlobalAddAtomA
CompareStringA
SetFilePointer
GetSystemWindowsDirectoryA
GlobalMemoryStatus
GetWindowsDirectoryW
CreateDirectoryW
FindNextChangeNotification
ConnectNamedPipe
GetUserDefaultLangID
TerminateThread
LoadLibraryExA
GetOEMCP
QueryDosDeviceW
GetStdHandle
EnumSystemLocalesA
HeapValidate
SizeofResource
GetExitCodeThread
SuspendThread
PulseEvent
GetEnvironmentStrings
IsBadReadPtr
FindFirstChangeNotificationW
FindNextFileW
TlsSetValue
GetCommConfig
lstrcmpiA
RemoveDirectoryA
GlobalGetAtomNameA
FreeResource

Exports

Exports

?Header@@YGPAXKPAEFF<V

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6adc48a3c8906a24a182b661a583b30d

Headers

File Characteristics

Imports

user32

msvcrt

gdi32

kernel32

Exports

Exports

Sections

.text Size: 82KB - Virtual size: 81KB

.data Size: 121KB - Virtual size: 188KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 82KB - Virtual size: 81KB

.data
Size: 121KB - Virtual size: 188KB

.reloc
Size: 2KB - Virtual size: 1KB