fc04cf13f9a29573d695dd639025af32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc04cf13f9a29573d695dd639025af32_JaffaCakes118
Size

2.9MB
MD5

fc04cf13f9a29573d695dd639025af32
SHA1

0f49a82561a757b8c9b448e3deb7837d5d568efe
SHA256

196874fcdf76fb418ab54c161e05901da53b33f88ab01a49d7198dec272d85d6
SHA512

a5d85c1aa78f0bf3d88ea3b5c716f064a18b590b8b32f2b411cc4df03e636fe1c3d46ce49bebc6c487d24135d0a9ac4a5fcf1525b0b759c2fb2debee134f84e1
SSDEEP

49152:YW2ZO1wWxjtGqMFuCa3AAFzDOHHDohSybbV/IkAMVgFckUmPg6hOIMW5fyvmOWSs:YWDnltiuD3A1GiRhOIr96hQG9oVQwz6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc04cf13f9a29573d695dd639025af32_JaffaCakes118

Files

fc04cf13f9a29573d695dd639025af32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e12afb73cf03655c07c0ba4f85523064

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wcsdup
calloc
iswctype
__getmainargs
_fileno
strstr
_wcslwr
swprintf
_onexit
wcscmp
exit
__badioinfo
wcstombs
_strnicmp
_itow
_snwprintf
_iob
mbstowcs
_ltoa
wcscspn
strchr
_c_exit
_CIacos
_vsnprintf
wcstok
wcsncpy
wcsstr
ceil
_wtol
_wcsnicmp
isalnum
isxdigit
_unlock
_initterm
??0exception@@QAE@ABV0@@Z
fclose
memset
printf

user32

CreatePopupMenu
CallWindowProcA
RegisterClassExA
LoadStringA
RedrawWindow
GetWindowDC
GetSubMenu
CharPrevA
SetRect
GetSysColorBrush
RegisterWindowMessageW
LoadIconA
LoadCursorW
GetWindowTextW
SetFocus
CharNextW
TrackPopupMenu
DestroyWindow
CharNextA
GetCursorPos
CharPrevW
PostMessageA
CheckRadioButton
SendMessageA
SetWindowLongA
DrawTextA
SetCapture
GetProcessWindowStation
IsWindow
GetCapture
GetMessageA
GetMenuItemCount
GetWindow
MessageBoxW
GetDesktopWindow
SetDlgItemTextA
GetSystemMenu
SetDlgItemTextW
CreateDialogParamW
GetSystemMetrics
SendDlgItemMessageW
GetClassNameW
ReleaseCapture
SendMessageW
LoadIconW

kernel32

GetWindowsDirectoryA
IsDBCSLeadByte
SetFilePointer
GetLocaleInfoW
IsDebuggerPresent
GetModuleHandleA
HeapAlloc
GetFileAttributesA
Sleep
LocalFree
GetExitCodeProcess
GetFileSize
CreateThread
CreateFileA
lstrcmpW
GetCPInfo
ExitProcess
HeapSize
InterlockedExchange
GlobalLock
GetModuleFileNameA
GetModuleHandleW
lstrcmpiA
OutputDebugStringA
GetTickCount
GetCurrentDirectoryW
CreateDirectoryW
WaitForMultipleObjects
GetExitCodeThread
GetCommandLineW
OpenEventW
GetCommandLineA
VirtualAlloc
InitializeCriticalSection
GetUserDefaultLCID
GetConsoleMode
GetLocaleInfoA
GetSystemTimeAsFileTime
WaitForSingleObject
FreeEnvironmentStringsW
WriteFile
FileTimeToLocalFileTime
GetCurrentProcess
FindResourceA
GetComputerNameW
LocalAlloc
SetHandleCount
IsBadReadPtr
MulDiv
FlushFileBuffers
LCMapStringW
GetThreadTimes
GetCurrentThreadId
OutputDebugStringW
InterlockedDecrement
SetFileAttributesW
InitializeCriticalSectionAndSpinCount
RaiseException
TlsGetValue
CreateDirectoryA
RtlUnwind
QueryPerformanceCounter
VirtualQuery
OpenMutexW
ReadFile
EnterCriticalSection
GetProcessHeap
GlobalAlloc
SetLastError
FormatMessageA
lstrcatA
TlsFree
TlsAlloc
GetACP

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 512B - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12afb73cf03655c07c0ba4f85523064

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 4KB - Virtual size: 4KB

BSS Size: 512B - Virtual size: 2.9MB

BSS Size: 4.9MB - Virtual size: 4.9MB

.tls Size: - Virtual size: 20KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 4KB - Virtual size: 4KB

BSS
Size: 512B - Virtual size: 2.9MB

BSS
Size: 4.9MB - Virtual size: 4.9MB

.tls
Size: - Virtual size: 20KB

.rsrc
Size: 17KB - Virtual size: 16KB