40bc4777ba577349384631674518d4c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40bc4777ba577349384631674518d4c4_JaffaCakes118
Size

232KB
MD5

40bc4777ba577349384631674518d4c4
SHA1

632084d77c7119e176def4d25efa6e127db24e5a
SHA256

df13b5151e9f0ef123fb3e28d7c2e7631d7466f4f9db45931b6017bbafb29bd9
SHA512

22ad38155a7320ed75659d37bfb4ca5875b69890c48999effad802563307fcb83fe808ee2b36fcb3cc18373ace4c61e1226ef0c1b025a98cd0ebc6971996d981
SSDEEP

6144:fIn47fQCW97DJsVPDyi0AvCfNbHeMS+2k:fS4ZKwdCZO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40bc4777ba577349384631674518d4c4_JaffaCakes118

Files

40bc4777ba577349384631674518d4c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a9179f976acb178805e8b29981222e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetVersion
GetStdHandle
GetVersionExA
GetLastError
lstrcpyA
GetModuleFileNameA
CreateEventA
LocalReAlloc
LocalAlloc
lstrlenA
GetCommandLineW
CloseHandle
GetModuleHandleA
FindResourceA
VirtualAllocEx
LoadLibraryA
lstrcmpA
GetCurrentThreadId
GlobalFindAtomA
lstrlenW
GlobalAlloc
FreeResource
GetStringTypeA
GetCommandLineA
ExitThread
GetFileSize
ExitProcess
Sleep
GetThreadLocale
GetProcAddress
IsBadReadPtr

user32

WindowFromPoint
ShowScrollBar
SetTimer
GetFocus
LoadKeyboardLayoutA
EnableMenuItem
GetWindowRect
SetParent
CreateIcon
GetParent
GetCapture
LoadStringA
SendMessageA
GetDesktopWindow
GetIconInfo
UpdateWindow
GetScrollPos
EqualRect
FillRect
DestroyIcon
TrackPopupMenu
GetMessagePos
SetWindowPos
DrawTextA
GetMenu
IntersectRect
DefFrameProcA
LoadCursorA
ClientToScreen
UnhookWindowsHookEx
OffsetRect
ScrollWindow
GetKeyboardLayoutList
SetWindowTextA
PtInRect
CharLowerBuffA
ActivateKeyboardLayout
GetDC
GetKeyboardLayout
EnableScrollBar
IsIconic
GetMenuItemID
GetCursor
GetClassInfoA
KillTimer
GetKeyboardState
OpenClipboard
OemToCharA
GetClientRect
GetMenuState
GetWindowLongW
WaitMessage
DrawAnimatedRects
SendMessageW
GetWindowLongA
DestroyCursor
LoadIconA
RegisterClipboardFormatA
GetPropA
TranslateMDISysAccel
CreateMenu
DestroyWindow
SetCapture
SetCursor
AdjustWindowRectEx
GetKeyboardType
SetClassLongA
GetDlgItem
RegisterWindowMessageA
CallWindowProcA
CharNextW
GetDCEx
GetWindowThreadProcessId
ChildWindowFromPoint
GetClassLongA
CreateWindowExA
SetWindowLongW
CharLowerA
ReleaseCapture
IsDialogMessageW
IsDialogMessageA
DrawFrameControl
GetClipboardData
DispatchMessageA
MessageBoxA
DrawIcon
ScreenToClient
CallNextHookEx
GetActiveWindow
UnregisterClassA
GetScrollInfo
GetSubMenu
FindWindowA
RegisterClassA
SetScrollInfo
GetKeyState
IsWindow
InsertMenuItemA
BeginPaint
SetActiveWindow
DefWindowProcA
EndPaint
InvalidateRect
SetMenuItemInfoA
GetSystemMenu
PostMessageA
SystemParametersInfoA
GetWindow
InsertMenuA
RedrawWindow
TranslateMessage
CharToOemA
DrawEdge
IsWindowUnicode
MapVirtualKeyA
MapWindowPoints
SetClipboardData
PeekMessageA
GetMenuItemCount
MsgWaitForMultipleObjects
SetScrollRange
PeekMessageW
EnumChildWindows
GetWindowDC
GetMenuStringA
MoveWindow
wsprintfA
EnumThreadWindows
GetForegroundWindow
MessageBeep
DestroyMenu
DispatchMessageW
InflateRect
CharNextA
SetFocus
GetKeyNameTextA
SetRect
SetForegroundWindow
CharUpperBuffA
FrameRect
SetWindowLongA
PostQuitMessage
GetWindowPlacement
EnumWindows
GetLastActivePopup
SetWindowsHookExA
SetPropA
DrawIconEx
SetWindowPlacement
SetScrollPos
IsZoomed
IsChild
DrawMenuBar
IsRectEmpty
CheckMenuItem
GetMenuItemInfoA
DeleteMenu
LoadBitmapA
GetWindowTextA
CreatePopupMenu
SetMenu
ShowWindow
IsWindowEnabled
GetSystemMetrics
CloseClipboard
ShowOwnedPopups
GetKeyboardLayoutNameA
GetClassNameA
GetScrollRange
GetSysColor
DefMDIChildProcA
IsWindowVisible
GetCursorPos

gdi32

GetPaletteEntries
GetPixel
GetDIBColorTable
GetRgnBox

ole32

CLSIDFromString
CoGetMalloc
MkParseDisplayName
CreateBindCtx
CoTaskMemFree
CoGetContextToken
CoCreateFreeThreadedMarshaler

shell32

SHGetFolderPathA

Sections

CODE
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc1
Size: 1024B - Virtual size: 618B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc6
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc3
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a9179f976acb178805e8b29981222e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

shell32

Sections

CODE Size: 74KB - Virtual size: 73KB

.data Size: 145KB - Virtual size: 144KB

.rsrc1 Size: 1024B - Virtual size: 618B

.rsrc4 Size: 1KB - Virtual size: 1KB

.rsrc0 Size: 6KB - Virtual size: 5KB

.rsrc6 Size: 1024B - Virtual size: 682B

.rsrc3 Size: 1024B - Virtual size: 810B

.rsrc Size: 1024B - Virtual size: 984B

CODE
Size: 74KB - Virtual size: 73KB

.data
Size: 145KB - Virtual size: 144KB

.rsrc1
Size: 1024B - Virtual size: 618B

.rsrc4
Size: 1KB - Virtual size: 1KB

.rsrc0
Size: 6KB - Virtual size: 5KB

.rsrc6
Size: 1024B - Virtual size: 682B

.rsrc3
Size: 1024B - Virtual size: 810B

.rsrc
Size: 1024B - Virtual size: 984B