f723e06edaac904f30b51674dbc50f77_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f723e06edaac904f30b51674dbc50f77_JaffaCakes118
Size

324KB
MD5

f723e06edaac904f30b51674dbc50f77
SHA1

b675cda9fd1cfc3041d7b81d5df305421b0e29a9
SHA256

60429fccf7651ad54b404e0ec6e5bb4bae84d13c5a21efd786c113acebf0c058
SHA512

ff9ce25e5a20a7597a9088e7bad33dbef8cab59c1eb5645ca1081e209aaa8302ef713c41ae656d8b3dfb4d62232bdbe4a5a098fca20d057da02d972040290f96
SSDEEP

6144:Jfgel8wvmjBe8xFUTHeMCkSuXn45x7um0zD:Jfg9dVrw+MCkSu3gJIzD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f723e06edaac904f30b51674dbc50f77_JaffaCakes118

Files

f723e06edaac904f30b51674dbc50f77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

atoi
memmove

user32

wvsprintfW
wsprintfW
wsprintfA
UpdateWindow
TranslateMessage
SetWindowLongW
SetTimer
SetRect
SetCursor
SetClipboardData
SendMessageW
ReleaseDC
RegisterClassW
PostMessageW
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
LoadStringW
LoadStringA
LoadCursorW
KillTimer
IsWindow
InvalidateRect
GetWindowLongW
GetParent
GetMessageW
GetDC
GetClipboardData
GetClientRect
GetClassInfoW
GetAsyncKeyState
EqualRect
EndPaint
EmptyClipboard
DispatchMessageW
DefWindowProcW
CreateWindowExW
CloseClipboard
ClientToScreen
BeginPaint

kernel32

lstrlenW
lstrlenA
lstrcpynW
lstrcpyW
lstrcpyA
lstrcmpiW
lstrcatW
lstrcatA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
Sleep
SetThreadPriority
SetFilePointer
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalUnlock
LocalLock
LocalHandle
LocalFree
LocalAlloc
LoadLibraryW
CloseHandle
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetACP
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
GetOverlappedResult
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetThreadPriority
GetVersionExW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatusEx
GlobalReAlloc
GlobalUnlock
HeapAlloc
LeaveCriticalSection
InitializeCriticalSection
IsBadCodePtr
IsBadHugeReadPtr
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
HeapFree

gdi32

SetWindowOrgEx
SelectPalette
SelectObject
RealizePalette
PatBlt
GetSystemPaletteEntries
GetStockObject
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetDeviceCaps
GetDCOrgEx
GetClipBox
DeleteObject
CreatePalette

winmm

mmioWrite
timeGetTime
waveInAddBuffer
waveInClose
waveInOpen
waveInPrepareHeader
waveInReset
mmioSeek
waveInStop
waveInUnprepareHeader
waveOutGetNumDevs
SendDriverMessage
OpenDriver
CloseDriver
mmioRead
mmioOpenW
mmioFlush
mmioDescend
mmioCreateChunk
mmioClose
mmioAscend
waveInStart
mciSendStringW

advapi32

RegCloseKey
RegCreateKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_snprintf
libintl_sprintf
libintl_textdomain
libintl_vfprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf
ngettext
set_relocation_prefix
textdomain

Sections

.text
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71a75bf18de32aa7ccf9df5a09226d30

Headers

File Characteristics

Imports

ntdll

user32

kernel32

gdi32

winmm

advapi32

version

Exports

Exports

Sections

.text Size: 236KB - Virtual size: 236KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 236KB - Virtual size: 236KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 12KB