141fc5902f1786cb3b84b9a7c0453590_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

141fc5902f1786cb3b84b9a7c0453590_JaffaCakes118
Size

128KB
MD5

141fc5902f1786cb3b84b9a7c0453590
SHA1

b41f2b8285aede8d609978af2a12648c1d1be926
SHA256

0b0e772c795a60f52ddd080bb3fe89271e8c3f40be29974a2f1490f150c49227
SHA512

054216dd3343fde79411639135450fd0f5205b49a843593b0173ec1b24f7808977839f89b137c00249d8775fbc80a7f84b0fdb235bd349725bf73f3e0b59ee8a
SSDEEP

3072:WfP2B+Dw5svHo9EL//mTAiONc+SVjkjABo:OeB+cyvo9W/mZONc4jA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141fc5902f1786cb3b84b9a7c0453590_JaffaCakes118

Files

141fc5902f1786cb3b84b9a7c0453590_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a7c7d468b26e916b739d5a9bd6cbaf27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetThreadPriority
LocalFree
WritePrivateProfileStringA
SystemTimeToFileTime
GetProcAddress
CreateFileA
FreeLibrary
ResumeThread
SetFileTime
lstrcatA
GlobalAlloc
GetModuleFileNameA
RemoveDirectoryA
WideCharToMultiByte
GetSystemTime
GetFileAttributesA
GetPrivateProfileStringA
lstrlenW
GetFileTime
GetSystemInfo
GetLastError
GetComputerNameA
GetThreadPriority
MoveFileA
UnmapViewOfFile
IsBadReadPtr
GetModuleHandleA
Sleep
SetFilePointer
GetCurrentThreadId
LoadLibraryA
GetCurrentThread
GetTickCount
CreateFileMappingA
lstrlenA
FindResourceA
InterlockedExchange
SetFileAttributesA
CreateProcessA
lstrcmpA
FileTimeToSystemTime
GlobalFree
MultiByteToWideChar
EnterCriticalSection
GetDiskFreeSpaceA
GetLocaleInfoA
GlobalMemoryStatus
lstrcpyA
HeapDestroy
DeleteCriticalSection
GetFileSize
LockResource
GetVolumeInformationA
WaitForSingleObject
InterlockedDecrement
GetTempPathA
LoadResource
WriteFile
GetVersion
CloseHandle
ExitProcess
HeapAlloc
HeapCreate
LoadLibraryExA
GlobalUnlock
ReadFile
GetVersionExA
InterlockedIncrement
SetEndOfFile
CreateMutexA
FormatMessageA
GetStartupInfoA
LocalAlloc

user32

GetParent
LoadBitmapA
ReleaseDC
DrawIconEx
GetWindowLongA
PeekMessageA
SendMessageA
CallNextHookEx
SetCapture
DispatchMessageA
DestroyMenu
PtInRect
AdjustWindowRectEx
GetMenuItemInfoA
GetDlgCtrlID
PostMessageA
UnionRect
SetMenuItemInfoA
SetWindowPos
GetSysColor
SetMenuDefaultItem
AppendMenuA
GetCapture
SetCursor
KillTimer
MapWindowPoints
IsIconic
DestroyCaret
BringWindowToTop
ScreenToClient
IntersectRect
InvalidateRect
GetMessageA
EnableWindow
UpdateWindow
GetWindow
SetTimer
GetSubMenu
GetCursorPos
RemoveMenu
WindowFromPoint
EndDeferWindowPos
LockWindowUpdate
PostQuitMessage
GetActiveWindow
GetClassLongA
SetCaretPos
RegisterWindowMessageA
BeginDeferWindowPos
GetClientRect
GetMenuItemCount
IsMenu
GetTopWindow
WaitMessage
GetDC
CreateCaret
OffsetRect
ReleaseCapture
PostThreadMessageA
SetWindowContextHelpId
GetMenuState
ModifyMenuA
RegisterClipboardFormatA
DrawEdge
LoadImageA
LoadCursorA
UnhookWindowsHookEx
wvsprintfA
GetDesktopWindow
GetDCEx
SetRectEmpty
RedrawWindow
CheckMenuItem
SetWindowsHookExA
GetMenuStringA
FillRect
DeleteMenu
MessageBoxA
GetMenuItemID
GetMessagePos
GetKeyState
SetParent
HideCaret
TrackPopupMenu
DrawFrameControl
LoadMenuA
IsWindowVisible
ShowCaret
GetSystemMetrics
DeferWindowPos
GetNextDlgTabItem
InflateRect
IsRectEmpty
GetSystemMenu
CopyRect
IsWindow
GetWindowRect
GetMenu
EnableMenuItem
SetForegroundWindow
EqualRect
CreatePopupMenu
FlashWindow
SystemParametersInfoA
ClientToScreen
MapDialogRect
DrawTextA
InsertMenuA
CreateWindowExA
SetRect
IsZoomed

shell32

SHFileOperationA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
SHBrowseForFolderA

ole32

StringFromGUID2
CLSIDFromString
StringFromCLSID
CoGetClassObject
CoTaskMemFree
OleCreateEmbeddingHelper
CoCreateGuid

oleaut32

VariantClear
SysAllocStringLen
SysFreeString

comctl32

ImageList_GetImageCount
ImageList_DragEnter
ImageList_EndDrag
ImageList_SetBkColor
ImageList_DragLeave
ImageList_AddMasked
ImageList_BeginDrag
ord8

winmm

PlaySoundA

wsock32

getsockname
connect
accept
shutdown
listen
closesocket
htons
send
ntohs
bind
WSAGetLastError
getpeername
WSAAsyncSelect
ioctlsocket
recv
WSASetLastError
inet_addr
gethostbyname
socket

msvcrt

_open
_acmdln
longjmp
_initterm
_itoa
gmtime
atoi
atof
sprintf
_setjmp3
??1type_info@@UAE@XZ
fseek
_chdir
ctime
__RTDynamicCast
_ftol
strncat
isdigit
_strdup
_except_handler3
isalpha
_exit
fopen
floor
_mbctoupper
_XcptFilter
fclose
free
_CxxThrowException
_CIpow
__getmainargs
exit
wcslen
_mbschr
clock
??8type_info@@QBEHABV0@@Z
isalnum
_onexit
__dllonexit
vsprintf
wcscpy
_mbsinc
_endthread
_close
_adjust_fdiv
?terminate@@YAXXZ
fprintf
_purecall
_chdrive
__setusermatherr
__set_app_type
__CxxFrameHandler
fgets
_setmbcp
qsort
__p__fmode
time
_fstat

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7c7d468b26e916b739d5a9bd6cbaf27

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

comctl32

winmm

wsock32

msvcrt

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 22KB - Virtual size: 45KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 22KB - Virtual size: 45KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB