f6a77cee36a816dbaa88e69a51c5f5a6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f6a77cee36a816dbaa88e69a51c5f5a6_JaffaCakes118
Size

215KB
MD5

f6a77cee36a816dbaa88e69a51c5f5a6
SHA1

a323dcdc5bb4e3c18dceb02054e910ae4c5573d7
SHA256

c2d76a32b1a18252790deb4d1f0b1dcd41221c0361fbb01addd094ddddc31e46
SHA512

4ad0feb51e8033ad4676a9cdfe19ca1b71e58d852be922984ba8791952860ca4076641dda04fe60f51974152e930900a04328fb40e794d89cf409e4622d372cd
SSDEEP

3072:dKOzQPN8jUxN5HRaRZhkIh+7lTfa2ANs7:3QF8jDRzaTfU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a77cee36a816dbaa88e69a51c5f5a6_JaffaCakes118

Files

f6a77cee36a816dbaa88e69a51c5f5a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a75dc3356d5e3b242189fb2c198ec8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FindNextFileA
FindClose
FindFirstFileW
FindNextFileW
LocalAlloc
FindResourceA
LoadResource
SizeofResource
FreeResource
CompareStringA
DisableThreadLibraryCalls
CreateThread
GetCurrentThreadId
ResumeThread
SetThreadPriority
GetExitCodeThread
ExitThread
TerminateThread
SetErrorMode
SetEnvironmentVariableA
CreateMutexA
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
GetSystemDirectoryW
LCMapStringW
FindResourceW
LockResource
GlobalHandle
GetCurrentThread
CopyFileA
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
GetProcAddress
GlobalReAlloc
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
OpenProcess
CreateProcessA
GetFileAttributesA
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrcatA
SystemTimeToFileTime
RtlUnwind
IsBadCodePtr
DeviceIoControl
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
CompareFileTime
FlushFileBuffers
GetCommandLineA
lstrcpyA
VirtualQuery
GetTimeZoneInformation
CreateProcessW
GetModuleHandleA
CreateFileA
ReadFile
WriteFile
CloseHandle
GetOEMCP
lstrlenA
SetStdHandle
GetTempPathW
VirtualFree
GetCurrentDirectoryA
WritePrivateProfileStringA
InterlockedDecrement
VirtualAlloc
GlobalAlloc
LocalFileTimeToFileTime
IsDebuggerPresent
SetThreadLocale
GetConsoleMode
FreeEnvironmentStringsA
FileTimeToLocalFileTime
GetFileSize
IsDBCSLeadByte
SetFileAttributesW
GetDiskFreeSpaceA
QueryPerformanceCounter
lstrcmpA
WriteConsoleA
GetDriveTypeA
UnhandledExceptionFilter
OpenMutexA
GetStringTypeExA
SetHandleCount
GetWindowsDirectoryA
GetLocaleInfoA
CreateFileW
GetShortPathNameA
GetModuleFileNameW
GetSystemDefaultLCID
GlobalLock
GetCPInfo
GetLocalTime
GetVersion
GetDateFormatA
CreateEventA
SetEvent
ResetEvent
IsValidCodePage
DeleteFileA
GetVersionExW
lstrcpynA
GetExitCodeProcess
GetModuleFileNameA
GetFileTime
GlobalFree
lstrcmpiW
SetFileAttributesA
GetStartupInfoW
GetLastError
GetTempPathA
RaiseException
GetCurrentProcessId

msvcrt

_fileno
strncat
_snprintf
_beginthreadex
time
_getcwd
ftell
_wcsicmp
_lseeki64
_open_osfhandle
_wtol
__p__fmode
_stricmp
_filelengthi64
rand
_exit
_errno
strcspn
log
fsetpos
_getpid
strtok
malloc
iswdigit
isleadbyte
strncmp
_dup2
wcschr
_pctype
__pioinfo
_fstat
_strcmpi
_ultoa
memchr
strcat
fgetc
_CIpow
_filbuf
_ismbblead
_strnicmp
strrchr
cos
_open
signal
fopen
wcscmp
srand
longjmp
_kbhit
iswctype
wcsrchr
__badioinfo
bsearch
__lc_codepage
_cexit
putchar
strcpy
exit
_mbsicmp
_isatty
fprintf
_CIsqrt
strncpy
_utime
strtoul
qsort
wcstombs
_putenv
_setjmp
wcscat
calloc
__getmainargs
floor
__CxxFrameHandler
_write
swscanf
wcsncpy
fseek
_itow
fputc
_umask
strtol
memset
_mktemp
atoi
fclose
wcstol
_vsnprintf
_acmdln
_strlwr
_stat
sin
ctime
strchr
towlower
_wtoi
_itoa
_osver
wctomb
_except_handler3
setlocale
__mb_cur_max
vsprintf
rewind
_fdopen
sscanf
_pipe
clock
_fullpath
remove
ceil
towupper
wcstoul
memmove
_controlfp
_snwprintf
isdigit
free
_lseek
_amsg_exit
_setjmp3
_chmod
sqrt
getenv
fflush
iswspace
fputs
realloc
printf
memcmp
_lock
memcpy
rename
toupper
_close
_mbsrchr
_assert
fgetpos
strerror
localeconv
_vsnwprintf
_getch
__setusermatherr
wcslen
isspace
fread
atol
ungetc
puts
_iob
_read
sprintf
strpbrk
atof
__p__environ
_wcsnicmp
__p__commode
_get_osfhandle
wcscspn
strlen
isxdigit
pow
_initterm
__set_app_type
wcsstr
_dup
swprintf
_ftol
_purecall
_unlink
fgets
_adjust_fdiv
localtime
_mkdir
strspn
abort
_mbscmp
__initenv
_wfopen
wcsncmp
_c_exit
__dllonexit
_XcptFilter
_isctype
clearerr
_strdup
_flsbuf
_unlock
_wcsupr
strstr
perror
fwrite
__p___initenv

user32

UnregisterClassA
ReleaseDC
GetSubMenu
GetDC
SetActiveWindow
EndDialog
WinHelpA
GetIconInfo
MessageBeep
IsDialogMessageA
GetLastActivePopup
FindWindowA
ScrollWindow
PeekMessageA
IsWindowVisible
SetCursor
GetParent
ClientToScreen
LoadBitmapA
UnhookWindowsHookEx
SetScrollPos
CallNextHookEx
IsRectEmpty
RedrawWindow
CallWindowProcA
MessageBoxA
DrawEdge
DefWindowProcA
PostQuitMessage
LoadCursorA
DrawFrameControl
CreatePopupMenu
DestroyMenu
GetTopWindow
SetMenu
GetMessageA
GetWindowDC
IsChild
DestroyCursor
MapWindowPoints
GetMenuItemID
CharLowerA
CloseClipboard
CharNextA
GetDlgItem
SetRect
RegisterClipboardFormatA
ShowCursor
PtInRect
InsertMenuA
IsZoomed
GetClassInfoA
SetWindowTextA
SystemParametersInfoA
GetMenuState
SetScrollRange
GetSystemMetrics
GetSystemMenu
LoadStringA
RemovePropA
GetActiveWindow
TrackPopupMenu
GetWindowRect
AdjustWindowRectEx
OffsetRect
ShowWindow
DialogBoxParamA
DestroyWindow
GetScrollRange
GetMenuItemCount
DrawIcon
GetMenu
SetWindowPos
GetWindowThreadProcessId
IsIconic
WindowFromPoint
GetClientRect
FillRect
GetWindowLongA
SetTimer
GetScrollPos
SetClipboardData
EnumWindows
UpdateWindow
SetPropA
IsWindowEnabled
GetScrollInfo
EnableWindow
SetWindowLongA
DrawMenuBar
SetClassLongA
GetFocus
BeginPaint
wsprintfA
TranslateMessage
GetMessagePos
KillTimer
GetSysColorBrush
GetMenuStringA
EnumThreadWindows
InsertMenuItemA
GetDCEx
DrawTextA
GetCapture
SetFocus
RegisterClassA
SetCapture
EndPaint
DeleteMenu
SetForegroundWindow
CheckMenuItem
GetSysColor
DrawIconEx
OpenClipboard
SetScrollInfo
OemToCharA
GetClassNameA
ShowOwnedPopups
IntersectRect
DispatchMessageA
IsWindow
CreateWindowExA
GetForegroundWindow
GetWindow
EnableMenuItem
FrameRect
GetCursorPos
PostMessageA
RemoveMenu
ReleaseCapture
EqualRect
EmptyClipboard
SendDlgItemMessageA
SetWindowPlacement
GetKeyboardType
GetWindowPlacement
InvalidateRect
WaitMessage
InflateRect
GetDesktopWindow

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.irdata
Size: 68KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a75dc3356d5e3b242189fb2c198ec8e

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 1KB - Virtual size: 4KB

.irdata Size: 68KB - Virtual size: 124KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 1KB - Virtual size: 4KB

.irdata
Size: 68KB - Virtual size: 124KB