fc71df6f708f8e745a7c6a8ee603529c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc71df6f708f8e745a7c6a8ee603529c_JaffaCakes118
Size

366KB
MD5

fc71df6f708f8e745a7c6a8ee603529c
SHA1

6020d7d6dc00741f9262f24de3ec587c97183a43
SHA256

e7c87b79aa1b9990e29278be7ecddc3533dea90f09edb644c2e69a2b8dadced8
SHA512

381fa3eca77c05cf69306dd0089960bd909ef4c4017f7d1efd5912549677fa1834f2bed108c34e9a93af31917c435208de52a588695711b24a1123cffa2c5475
SSDEEP

6144:ND4PrK7O5DNy3MHvFQ53aGyKfC/i17z5OlMSa5ZNY6pjE81n2UnDuKatO9d:mz+O5DNy3MPFQ53OJ/e35OlOe1aFDva

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc71df6f708f8e745a7c6a8ee603529c_JaffaCakes118

Files

fc71df6f708f8e745a7c6a8ee603529c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fdca8f5997fe5e3856f74ef9fd2320a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetBkColor

version

VerQueryValueA

msvcrt

wcsncmp
log10
atol
wcscspn
acos
memcmp
rand

shlwapi

SHQueryInfoKeyA
SHEnumValueA
PathIsDirectoryA
SHDeleteValueA
SHQueryValueExA
SHDeleteKeyA
PathIsContentTypeA
SHStrDupA

user32

GetWindowDC
DefMDIChildProcA
DrawIconEx
SetWindowsHookExA
ClientToScreen
UnhookWindowsHookEx
GetTopWindow
GetClipboardData
InvalidateRect
GetClientRect
DeleteMenu
DestroyMenu
GetWindow
ScrollWindow
FillRect
IsIconic
TranslateMessage
CreateWindowExA
SetClipboardData
GetSystemMenu
WindowFromPoint
IsChild
GetDC
InflateRect
EnableScrollBar
SetWindowLongA
PeekMessageA
GetMessagePos
SetMenuItemInfoA
GetWindowRect
DispatchMessageW
CreatePopupMenu
PtInRect
GetWindowPlacement
GetMenuItemInfoA
SetScrollInfo
GetScrollInfo
DestroyCursor
GetSubMenu
ReleaseDC
CharNextA
GetKeyboardLayoutList
GetClassNameA
GetKeyState
DestroyWindow
SetPropA
CharLowerBuffA
RedrawWindow
UnregisterClassA
DefWindowProcA
SetActiveWindow
MapVirtualKeyA
GetWindowLongA
GetKeyboardState
PostQuitMessage
SetScrollRange
RegisterClipboardFormatA
MoveWindow
SetWindowPlacement
EnableMenuItem
SetRect
EnumThreadWindows
MessageBeep
ShowScrollBar
LoadIconA
SetFocus
GetCursor
GetWindowThreadProcessId
GetKeyboardLayoutNameA
SetWindowPos
SetTimer
PostMessageA
OpenClipboard
DrawFrameControl
GetMenuItemID
EqualRect
GetActiveWindow
ReleaseCapture
CharLowerA
GetWindowTextA
EndPaint
GetFocus
CharNextW
IsDialogMessageW
GetParent
ChildWindowFromPoint
TrackPopupMenu
RemoveMenu
GetSysColorBrush
GetCapture
CheckMenuItem
GetDesktopWindow
GetScrollPos
GetSystemMetrics
GetLastActivePopup
MsgWaitForMultipleObjects
EnumChildWindows
GetCursorPos
GetMenuState
KillTimer
LoadKeyboardLayoutA
RegisterClassA
LoadBitmapA
MessageBoxA
ShowOwnedPopups
DispatchMessageA
ShowWindow
IsDialogMessageA
ScreenToClient
DrawEdge
SetScrollPos
SetCursor
GetSysColor
OffsetRect
CharUpperBuffA
SetMenu
SendMessageW
RegisterWindowMessageA
GetClassLongA
SetClassLongA
FrameRect
InsertMenuItemA
GetKeyboardLayout
CloseClipboard
CallWindowProcA
GetDCEx
DefFrameProcA
CreateIcon
LoadStringA
TranslateMDISysAccel
GetMenuStringA
GetMenuItemCount
GetScrollRange
IsWindow
CharToOemA
DestroyIcon
LoadCursorA
IsZoomed
SendMessageA
DrawIcon
GetMenu
RemovePropA
EnableWindow
IntersectRect
UpdateWindow
IsWindowVisible
SetParent
CallNextHookEx
IsWindowUnicode

advapi32

RegEnumKeyA
RegEnumValueA
RegLoadKeyA
GetLengthSid

kernel32

GetModuleHandleW
ExitProcess
GetProcAddress
LocalAlloc
VirtualAllocEx
LoadLibraryA
IsBadReadPtr
ExitThread
GetCommandLineA
GetModuleHandleA
GetCommandLineW

oleaut32

SafeArrayUnaccessData
SysAllocStringLen
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayCreate
SysFreeString
SysStringLen
VariantChangeType
RegisterTypeLib

gdi32

CreatePalette
CreatePenIndirect
GetDIBColorTable
SetPixel
GetBitmapBits
CreateFontIndirectA
SelectPalette
CreateDIBitmap
GetCurrentPositionEx
CreateBitmap

ole32

WriteClassStm
ReleaseStgMedium
CoCreateInstanceEx

shell32

SHGetFolderPathA
SHFileOperationA

Sections

CODE
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 773B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc8
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc1
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc9
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fdca8f5997fe5e3856f74ef9fd2320a

Headers

File Characteristics

Imports

comctl32

version

msvcrt

shlwapi

user32

advapi32

kernel32

oleaut32

gdi32

ole32

shell32

Sections

CODE Size: 70KB - Virtual size: 69KB

DATA Size: 1024B - Virtual size: 773B

.rsrc4 Size: 1KB - Virtual size: 1KB

.rsrc8 Size: 1024B - Virtual size: 672B

.rsrc1 Size: 6KB - Virtual size: 6KB

.rsrc2 Size: 1KB - Virtual size: 1KB

.rsrc9 Size: 282KB - Virtual size: 282KB

.rsrc Size: 1024B - Virtual size: 976B

CODE
Size: 70KB - Virtual size: 69KB

DATA
Size: 1024B - Virtual size: 773B

.rsrc4
Size: 1KB - Virtual size: 1KB

.rsrc8
Size: 1024B - Virtual size: 672B

.rsrc1
Size: 6KB - Virtual size: 6KB

.rsrc2
Size: 1KB - Virtual size: 1KB

.rsrc9
Size: 282KB - Virtual size: 282KB

.rsrc
Size: 1024B - Virtual size: 976B