3a20e4de72c4237a742d0374dfdc6584_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3a20e4de72c4237a742d0374dfdc6584_JaffaCakes118
Size

115KB
MD5

3a20e4de72c4237a742d0374dfdc6584
SHA1

024fd1eade2873ef833e269848e6e58322c725e3
SHA256

c3297b1ef66fa82450ed8db506640b7170e33a5a3c6b8a96b0e4bbf150be327f
SHA512

8e9ba7ad33abe25c26afece483f5857fb7f57b4bc144055c2122b14384fc86c1b0dd071a0e6d92d198e40866d321a49ddd5372b1a91b7f43fbf406ca85fe2650
SSDEEP

1536:6Cc5ug+iAbUZXcaa0+ZX6u4frgBj1wMSXRPBRg8aTrwFCHf1eeNfh:6hBZNa0gKu4frgBCXvRgrA81eeN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a20e4de72c4237a742d0374dfdc6584_JaffaCakes118

Files

3a20e4de72c4237a742d0374dfdc6584_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7da4e273889abe9595978f4a832544e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
ChildWindowFromPoint
SetParent
GetClientRect
BeginPaint
GetKeyboardLayoutNameA
GetScrollPos
GetWindowLongW
GetIconInfo
GetKeyNameTextA
GetDC
PostQuitMessage
TranslateMDISysAccel
InflateRect
UnhookWindowsHookEx
TrackPopupMenu
MapWindowPoints
TranslateMessage
GetClassInfoA
GetWindowTextA
GetFocus
PeekMessageW
EnumThreadWindows
SetWindowTextA
CheckMenuItem
RemoveMenu
SetScrollRange
SystemParametersInfoA
InvalidateRect
DispatchMessageW
UpdateWindow
DispatchMessageA
WaitMessage
GetCursorPos
ShowWindow
IsWindowVisible
IsIconic
DrawFrameControl
GetKeyboardType
SendMessageA
PtInRect
AdjustWindowRectEx
GetKeyboardLayoutList
SetCursor
ShowOwnedPopups
GetMenu
CharNextW
IsZoomed
GetKeyboardLayout
DefWindowProcA
RegisterClipboardFormatA
OemToCharA
GetWindowPlacement
GetWindowThreadProcessId
ScreenToClient
CharLowerBuffA
InsertMenuItemA
RemovePropA
IsChild
EnableScrollBar
CreatePopupMenu
MoveWindow
ReleaseCapture
LoadStringA
ClientToScreen
GetWindowLongA
SetCapture
CallNextHookEx
CharToOemA
GetWindowRect
FindWindowA
CallWindowProcA
GetClassNameA
DrawAnimatedRects
CharUpperBuffA
FrameRect
SetScrollInfo
UnregisterClassA
SetForegroundWindow
EnumWindows
GetScrollInfo
SetWindowPos
SendMessageW
RegisterClassA
SetWindowLongW
OffsetRect
DefFrameProcA
EqualRect
CreateMenu
DestroyMenu
IsDialogMessageA
ShowScrollBar
SetFocus
IsWindowEnabled
GetClassLongA
LoadCursorA
DrawIcon
GetPropA
GetSysColorBrush
GetCapture
EnumChildWindows
SetMenu
CloseClipboard
GetSubMenu
PeekMessageA
GetActiveWindow
MessageBeep
GetSystemMetrics
InsertMenuA
GetMessagePos
RedrawWindow
GetKeyState
SetRect
DrawMenuBar
MessageBoxA
IntersectRect
LoadBitmapA
SetMenuItemInfoA
MapVirtualKeyA
GetMenuItemCount
GetClipboardData
EnableMenuItem
FillRect
DeleteMenu
SetActiveWindow
EndPaint
GetWindow
GetMenuState
ScrollWindow
SetClipboardData
GetWindowDC
PostMessageA
IsWindow
CreateIcon
DestroyCursor
GetDCEx
GetSysColor
GetScrollRange
wsprintfA
SetPropA
IsDialogMessageW
DefMDIChildProcA
IsWindowUnicode
GetDlgItem
DrawEdge
KillTimer
RegisterWindowMessageA
GetParent
IsRectEmpty
EnableWindow
GetMenuItemInfoA
SetTimer
GetSystemMenu
CharNextA
OpenClipboard
GetLastActivePopup
SetWindowLongA
GetCursor
DrawTextA
DrawIconEx
GetMenuItemID
SetScrollPos
GetTopWindow
GetDesktopWindow
GetMenuStringA
DestroyIcon
GetKeyboardState
DestroyWindow
CharLowerA
SetClassLongA
MsgWaitForMultipleObjects

kernel32

GetSystemDefaultLangID
GetOEMCP
HeapFree
VirtualQuery
VirtualAlloc
GetACP
FindFirstFileA
GetLocalTime
VirtualAllocEx
SetEndOfFile
CreateFileA
CreateThread
FormatMessageA
ReadFile
FreeLibrary
LocalFree
LoadResource
ExitProcess
GetDateFormatA
LoadLibraryA
GetThreadLocale
GetFileAttributesA
GlobalAddAtomA
lstrlenA
MoveFileExA
GetLastError
GetLocaleInfoA
ExitThread
FindClose
GetTickCount
MoveFileA
GetEnvironmentStrings
GetModuleFileNameA
GetStringTypeW
CloseHandle
lstrcmpiA
GetFileSize
GlobalAlloc
GetProcAddress
GlobalFindAtomA
MulDiv
EnumCalendarInfoA
SetThreadLocale
WaitForSingleObject
EnterCriticalSection
GetCurrentThread
GlobalDeleteAtom
CreateEventA
SetErrorMode
SetFilePointer
SetHandleCount
GetVersion
DeleteFileA
SetEvent
SetLastError
LocalReAlloc
lstrcmpA
GetCPInfo
FreeResource
lstrcpynA
GetProcessHeap
RaiseException
GetCurrentProcess
GetStdHandle
GetFileType
CompareStringA
GetStringTypeA
Sleep
DeleteCriticalSection
lstrcpyA
LoadLibraryExA
FindResourceA
GetStartupInfoA
VirtualFree
InitializeCriticalSection
GetCurrentThreadId
SizeofResource
WriteFile
ResetEvent
GetCommandLineA
LocalAlloc
HeapAlloc
GetModuleHandleA
GetFullPathNameA
LockResource

msvcrt

memcpy
cos

Sections

CODE
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7da4e273889abe9595978f4a832544e4

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

Sections

CODE Size: 102KB - Virtual size: 101KB

BSS Size: 7KB - Virtual size: 6KB

.edata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 385B

CODE
Size: 102KB - Virtual size: 101KB

BSS
Size: 7KB - Virtual size: 6KB

.edata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 385B