fe65beabafd2e3e56d1d8c8fdb3da77d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe65beabafd2e3e56d1d8c8fdb3da77d_JaffaCakes118
Size

248KB
MD5

fe65beabafd2e3e56d1d8c8fdb3da77d
SHA1

a80f22365304b2bdae934f86fe5aced904dc7063
SHA256

9710d485929e70ca8a900340eaa031cec9b5319c0396aafa6b668264eab43a33
SHA512

bbabe2cc9b9ba5f2f579a1beb6facefb3359dec6cc84a7b425eab2f53a9ba189edd5908acf868631d557c3502b5eb8b2c98966d1dfce037e4cd02ff95ccfe0d7
SSDEEP

6144:epnxY8ovfPdT6tNQJ2IzqXnQU9kekuA5JzY3OcowhhWBnBZOKKLX:c2rdGtc3wnQU9kegJz+XhQZF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe65beabafd2e3e56d1d8c8fdb3da77d_JaffaCakes118

Files

fe65beabafd2e3e56d1d8c8fdb3da77d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2099108da2e76aa251643c8ef7cc664e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA
CreatePropertySheetPageA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

winmm

timeGetTime

msimg32

AlphaBlend

kernel32

FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
TerminateProcess
GetStringTypeW
GetStringTypeA
ExitProcess
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
HeapAlloc
HeapFree
SetHandleCount
GetFileType
VirtualProtect
GetSystemInfo
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
SetErrorMode
UnmapViewOfFile
LoadResource
SizeofResource
LockResource
FreeResource
FindFirstFileA
CreateFileA
CreateFileMappingA
MapViewOfFile
CloseHandle
ReadFile
FindResourceA
FindResourceExA
GetCurrentThreadId
CreateProcessA
Sleep
FreeLibrary
GetLastError
GetVersionExA
GetCurrentProcess
GetSystemDirectoryA
LoadLibraryA
GetPrivateProfileStringA
lstrcatA
GetWindowsDirectoryA
SetThreadLocale
GetSystemDefaultLCID
GetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetCommandLineA
lstrcpyA
GetModuleFileNameA
lstrcmpiA
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcpynA
GetLocaleInfoW
HeapSize
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringW

user32

SetFocus
PostQuitMessage
SetTimer
GetForegroundWindow
GetAsyncKeyState
LoadMenuA
GetSubMenu
EnableMenuItem
GetWindowThreadProcessId
AttachThreadInput
TrackPopupMenu
DestroyMenu
ModifyMenuA
DeleteMenu
DialogBoxParamA
RemovePropA
SetPropA
GetPropA
UpdateWindow
CreatePopupMenu
CheckMenuItem
InsertMenuItemA
GetWindow
MoveWindow
EnumWindows
EnumDisplaySettingsExA
ChangeDisplaySettingsA
EnumDisplaySettingsA
ShowWindow
ExitWindowsEx
GetSystemMetrics
WinHelpA
MessageBoxA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
LoadIconA
FindWindowA
GetWindowTextA
SetWindowTextA
SetWindowPos
CharPrevA
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
InvalidateRect
GetClassNameA
GetWindowRect
GetSystemMenu
SetWindowLongA
DrawIconEx
DrawStateA
DestroyIcon
SetMenuItemInfoA
GetMenuItemCount
GetMenuItemInfoA
CheckMenuRadioItem
InsertMenuA
DrawIcon
MessageBeep
LoadImageA
DrawEdge
OffsetRect
DrawTextA
SystemParametersInfoA
CharNextA
GetDlgItem
CheckDlgButton
EnableWindow
CheckRadioButton
PostMessageA
GetDlgItemInt
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
FillRect
IsDlgButtonChecked
wsprintfA
LoadCursorA
RegisterClassA
DefWindowProcA
GetCursorPos
PtInRect
SetCursor
ReleaseCapture
SetCapture
KillTimer
GetSysColor
IsWindowEnabled
IsWindowVisible
GetDC
GetWindowLongA
GetClientRect
GetUpdateRect
BeginPaint
EndPaint
SendMessageA
CopyRect
GetParent
MapWindowPoints
CopyImage
GetWindowDC
ReleaseDC
DeferWindowPos
GetDesktopWindow
SetForegroundWindow

gdi32

GetStockObject
SetBkMode
CreateFontIndirectA
CreateSolidBrush
MoveToEx
LineTo
Ellipse
CreatePen
GetObjectA
GetCurrentObject
GetTextExtentPoint32A
GetTextMetricsA
GetDeviceCaps
CreateDCA
CreateBitmap
SetTextColor
SetStretchBltMode
GetPixel
PatBlt
CreatePatternBrush
ExtSelectClipRgn
Polygon
CreateRectRgn
GetTextColor
SelectClipRgn
GetPaletteEntries
ExtEscape
CreateDIBSection
ExtTextOutA
Rectangle
StretchBlt
UpdateColors
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
BitBlt
DeleteObject
SelectPalette
RealizePalette
CreateDIBitmap
SetBkColor
CreatePalette

advapi32

RegQueryValueExA
RegDeleteValueA
RegEnumKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
GetUserNameA
RegCloseKey

shell32

FindExecutableA
Shell_NotifyIconA

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2099108da2e76aa251643c8ef7cc664e

Headers

File Characteristics

Imports

comctl32

version

winmm

msimg32

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 116KB - Virtual size: 116KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 116KB - Virtual size: 116KB