fb78c49d4cd25dffe9c190440cd5438f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fb78c49d4cd25dffe9c190440cd5438f_JaffaCakes118
Size

1.8MB
MD5

fb78c49d4cd25dffe9c190440cd5438f
SHA1

e0b548db48e8039f2178ff8233d23a94b77b75ac
SHA256

a539eaf9caa24a9457659d826d22b99dc4343a5e33d18915ec0e0296a1e3056f
SHA512

6673a0bfd760ec2f530d729b23290f45ae01b3a038c28367450f1af7546b9914cf3828e49cb4d2657b996b30bfca58d805a497a9a61e4c0b0f0782d823ce2320
SSDEEP

49152:kAs5HwGgmGzHOFNrUymr1kvvYAfeU85kh:GHemGzvypvVZ0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb78c49d4cd25dffe9c190440cd5438f_JaffaCakes118

Files

fb78c49d4cd25dffe9c190440cd5438f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bd9e96413d362a01638fb616ee5e96b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructA
WritePrivateProfileStructA
GetCurrentProcess
lstrcpyA
SetPriorityClass
GetShortPathNameA
GetSystemTimeAsFileTime
GlobalUnlock
CreateEventA
lstrcmpA
GlobalReAlloc
SetThreadPriority
GetDriveTypeA
GetLogicalDrives
GetStartupInfoA
WritePrivateProfileStringA
GetPrivateProfileStringA
Sleep
CreateThread
WaitForSingleObject
CloseHandle
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
MulDiv
GetTickCount
GlobalAlloc
GetFileAttributesA
ExitProcess
CopyFileA
GetLastError
ReleaseSemaphore
GetFullPathNameA
FindNextFileA
TerminateThread
MoveFileA
CreateFileA
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
FreeLibrary
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
FindClose
WideCharToMultiByte
CreateProcessA
lstrcmpiA
DeleteFileA
GetTempFileNameA
GetPrivateProfileIntA
SetCurrentDirectoryA
GetCurrentDirectoryA
RemoveDirectoryA
SystemTimeToFileTime
GlobalLock
GlobalFree
GetModuleHandleA

user32

LoadCursorA
SetCursor
ClientToScreen
GetUpdateRect
BeginPaint
EndPaint
GetForegroundWindow
CopyRect
IsWindow
FindWindowA
SetWindowLongA
SetParent
FindWindowExA
DefWindowProcA
IsChild
CheckMenuItem
SetWindowTextA
GetWindowDC
ReleaseDC
DestroyWindow
CreateDialogParamA
GetDlgItem
GetWindowRect
ScreenToClient
SetWindowPos
InvalidateRect
SendMessageA
GetDlgItemTextA
DrawTextA
SetForegroundWindow
ShowWindow
TrackPopupMenu
ReleaseCapture
SetCapture
CreateWindowExA
IsWindowVisible
GetWindowLongA
GetClientRect
EnableWindow
LoadImageA
wsprintfA
EndDialog
MessageBoxA
GetAsyncKeyState
GetMessageA
GetSystemMetrics
KillTimer
SetFocus
UnregisterClassA
FillRect
EnumDisplaySettingsA
SetRect
SystemParametersInfoA
CharPrevA
DestroyIcon
DestroyCursor
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetWindowRgn
wvsprintfA
CheckRadioButton
SetDlgItemInt
GetDlgItemInt
DrawIconEx
SetTimer
WindowFromPoint
RegisterClipboardFormatA
SetClassLongA
DialogBoxParamA
LoadBitmapA
IsDlgButtonChecked
CreatePopupMenu
DestroyMenu
PostQuitMessage
UpdateWindow
LoadMenuA
GetSystemMenu
InsertMenuA
GetMenuItemInfoA
InsertMenuItemA
LoadIconA
GetClassInfoA
RegisterWindowMessageA
LoadStringA
LoadAcceleratorsA
RemoveMenu
GetClassLongA
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
CharNextA
CallWindowProcA
SendDlgItemMessageA
PeekMessageA
SetDlgItemTextA
GetDC
GetWindowTextA
RegisterClassExA
CheckDlgButton
SetCursorPos

gdi32

DeleteDC
GetDIBits
SelectObject
CreateCompatibleDC
SetBkMode
SetTextColor
LineTo
MoveToEx
UpdateColors
RealizePalette
SelectPalette
BitBlt
CreateDIBSection
CreatePalette
GetDeviceCaps
CreateBrushIndirect
GetNearestColor
GetPixel
GetTextMetricsA
CreateFontA
CreateCompatibleBitmap
StretchBlt
ExtSelectClipRgn
Rectangle
IntersectClipRect
SetBkColor
GetStockObject
CreatePen
TextOutA
CreateRectRgn
CreatePolyPolygonRgn
GetTextExtentPoint32A
CreateSolidBrush
GetObjectA
RoundRect
GetBkColor
GetTextColor
DeleteObject
GetDIBColorTable

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegOpenKeyExA

shell32

ShellExecuteA
SHGetMalloc
DragQueryPoint
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA

comctl32

ord17

ole32

CoCreateGuid
CoRevokeClassObject
RevokeDragDrop
OleUninitialize
OleInitialize
RegisterDragDrop
CoRegisterClassObject
CoInitialize
CLSIDFromString
CoCreateInstance

comdlg32

GetSaveFileNameA
GetOpenFileNameA

msvcrt

_XcptFilter
_onexit
__dllonexit
__CxxFrameHandler
malloc
free
strtol
fwrite
qsort
ceil
__mb_cur_max
_isctype
_pctype
mbstowcs
wcstombs
??2@YAPAXI@Z
sprintf
toupper
fseek
ftell
realloc
fputc
memset
_exit
exit
memcmp
fgets
atoi
??3@YAXPAX@Z
strncpy
strlen
strcmp
strncmp
fprintf
sqrt
sin
pow
strcat
fopen
fread
fclose
strcpy
_mbsstr
memcpy
rand
_ftol
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_stricmp
_controlfp
_strnicmp
_strdup

Sections

DATA
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 1KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bd9e96413d362a01638fb616ee5e96b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

comdlg32

msvcrt

Sections

DATA Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 5KB - Virtual size: 4KB

.rdata Size: 1024B - Virtual size: 559B

.idata Size: 8KB - Virtual size: 7KB

CODE Size: 1KB - Virtual size: 2.6MB

DATA
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 5KB - Virtual size: 4KB

.rdata
Size: 1024B - Virtual size: 559B

.idata
Size: 8KB - Virtual size: 7KB

CODE
Size: 1KB - Virtual size: 2.6MB