fb742e7d80a038f90d6dbbfa6619604a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fb742e7d80a038f90d6dbbfa6619604a_JaffaCakes118
Size

352KB
MD5

fb742e7d80a038f90d6dbbfa6619604a
SHA1

7f69fac466272cd11ab697b42584949d192219bf
SHA256

800a75270827aa97015bd3298d5d25037087f8ab54d9bf00132384c05ff41b2f
SHA512

62a70d2d7194174aad673542a757c8b674c87783fee953dea4f55421e92b6bc41195642d7d6a79f0124339e95b887b78b2cc04e2198d3f1f850f0a6391dd7f01
SSDEEP

6144:jkOB9vD2zkaZjgbMlrRoPaF0mZFYho/kG9N0i/+qGNbdSFGGZE2b:jkOB9vDKZ8IlyZmYhZYZ+F1kFLZEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb742e7d80a038f90d6dbbfa6619604a_JaffaCakes118

Files

fb742e7d80a038f90d6dbbfa6619604a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe4d184000e0aeb495a7fab33242bf78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\soko

Imports

comctl32

InitCommonControlsEx
ImageList_DrawIndirect
InitMUILanguage
ImageList_Draw
ImageList_Create

user32

LockWindowUpdate
CheckMenuItem
FillRect
CreateWindowExA
ShowWindow
UnloadKeyboardLayout
LoadCursorW
CallMsgFilterA
LoadIconA
GetQueueStatus
EnumThreadWindows
InSendMessageEx
EnumDisplaySettingsExW
DestroyWindow
SetActiveWindow
GetMessageExtraInfo
GetSubMenu
CreateMenu
SetWindowsHookA
UnhookWinEvent
AnyPopup
DdeQueryNextServer
MapVirtualKeyExA
GetWindowRgn
SendIMEMessageExA
DdeSetQualityOfService
ReplyMessage
DdeAccessData
ReleaseDC
GetWindowLongW
GetKeyState
CreateWindowStationA
GetTabbedTextExtentA
OpenDesktopW
ScrollWindow
GetPriorityClipboardFormat
CloseDesktop
PaintDesktop
DeferWindowPos
CreateIcon
CreateIconFromResourceEx
DdeConnect
RegisterClassA
GetMenuContextHelpId
GetMenuItemInfoA
SendInput
MapVirtualKeyW
DefFrameProcA
PtInRect
SetWindowTextW
RegisterClassExW
GetMenuDefaultItem
MessageBoxW
OpenInputDesktop
DefWindowProcA
RegisterClassExA
WindowFromDC
SetMenuInfo
FrameRect

kernel32

FindNextFileW
GetCommandLineA
GetFileType
SetCurrentDirectoryW
GetMailslotInfo
GetCurrentProcess
GetCurrentThreadId
SetHandleCount
UnlockFile
GetCurrencyFormatA
HeapDestroy
LCMapStringW
GetStringTypeA
WriteConsoleW
LoadLibraryExW
FindNextFileA
GlobalFix
GetTimeZoneInformation
SetLastError
IsDebuggerPresent
CompareStringW
GetStartupInfoA
GetVersionExA
HeapSize
WaitForSingleObjectEx
SetConsoleTitleA
FreeEnvironmentStringsW
UnmapViewOfFile
GetProcessHeap
GlobalGetAtomNameW
WriteFile
MoveFileExW
GetStdHandle
LeaveCriticalSection
CreateMailslotW
FindClose
GetConsoleCP
GetModuleFileNameA
VirtualAlloc
InterlockedExchangeAdd
SetConsoleTitleW
LockFileEx
SetThreadContext
EnterCriticalSection
GlobalLock
ExitProcess
GetModuleHandleA
GetProfileStringW
UnhandledExceptionFilter
GetDriveTypeA
GetTempPathA
SetCurrentDirectoryA
WritePrivateProfileSectionA
VirtualQuery
ReadConsoleOutputW
GetPrivateProfileIntW
InitializeCriticalSection
GetStartupInfoW
GetCurrentThread
MoveFileW
GetACP
GetNamedPipeInfo
OpenMutexA
GetUserDefaultLCID
GlobalCompact
TlsAlloc
GetSystemTimeAsFileTime
GetPrivateProfileSectionA
SetThreadLocale
SetStdHandle
GetStringTypeW
MultiByteToWideChar
HeapReAlloc
LoadLibraryA
Sleep
HeapAlloc
HeapFree
FreeEnvironmentStringsA
EnumTimeFormatsA
GetCPInfo
SetFilePointer
GetTickCount
GetPrivateProfileStructW
SetEnvironmentVariableA
LocalAlloc
GetCommandLineW
ExitThread
GetEnvironmentStringsW
SetConsoleCtrlHandler
FlushFileBuffers
InterlockedDecrement
InterlockedExchange
CompareStringA
GetNamedPipeHandleStateW
WideCharToMultiByte
MoveFileA
GetCurrentProcessId
GetConsoleMode
LockFile
DebugActiveProcess
FindFirstFileExW
FreeLibrary
VirtualFree
GetConsoleOutputCP
CommConfigDialogW
IsValidLocale
DeleteCriticalSection
CreateMutexA
RtlUnwind
lstrcmpiA
InterlockedIncrement
EnumSystemLocalesA
VirtualAllocEx
GetOEMCP
TlsGetValue
IsValidCodePage
GetModuleFileNameW
EnumCalendarInfoA
LCMapStringA
ReadFile
CreateSemaphoreW
SetUnhandledExceptionFilter
GetEnvironmentStrings
FillConsoleOutputCharacterW
HeapCreate
CreateFileW
CloseHandle
SetEvent
TlsFree
GetProcAddress
GetLastError
GetDateFormatA
GetLocaleInfoW
GetTimeFormatA
GetLocaleInfoA
WriteConsoleA
QueryPerformanceCounter
CreateFileA
TerminateProcess
InitializeCriticalSectionAndSpinCount
GetDateFormatW
OpenProcess
SetLocaleInfoW
TlsSetValue
ReadConsoleW
GetAtomNameA

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe4d184000e0aeb495a7fab33242bf78

Headers

File Characteristics

PDB Paths

Imports

comctl32

user32

kernel32

Sections

.text Size: 156KB - Virtual size: 154KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 96KB - Virtual size: 100KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 156KB - Virtual size: 154KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 96KB - Virtual size: 100KB

.rsrc
Size: 24KB - Virtual size: 23KB