439939bd34d03fa2172937fe311dba98_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

439939bd34d03fa2172937fe311dba98_JaffaCakes118
Size

44KB
MD5

439939bd34d03fa2172937fe311dba98
SHA1

651332c84b29635bbbb071bbcc0ccb32f9c535d4
SHA256

ac12c180e06edadf358a39c3bc715d7bfda01ff1a1ffa683a2433857b91f59c7
SHA512

2507f5838f980d54f57d441c99a0b0314e03fd7560147dd0529bcffc43901d298450bccce5f610a0400dd81f79bc2ccaf337a888e78370c6486c66eb68c01166
SSDEEP

768:EKomuqPIBV76n4e1XBp0HOwvD5RycI6FF5l8g58HD6c6q5O:wqABFN+psVMg58+cVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439939bd34d03fa2172937fe311dba98_JaffaCakes118

Files

439939bd34d03fa2172937fe311dba98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a0364efd77e6a70df071e746f18a2fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcslen
wcscpy
wcscat
wcsncpy
strstr
strlen
_strnicmp
strcmp
strncpy
strcpy
sprintf
memcmp
wcscmp
wcsncmp
fclose
fabs
ceil
malloc
floor
free
memcpy
localtime
mktime
_itow
_wcsnicmp
gmtime
_vsnwprintf

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
SetCurrentDirectoryA
HeapReAlloc
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
InitializeCriticalSection
GetCommandLineW
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessW
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
GetTickCount
GlobalLock
GlobalSize
MultiByteToWideChar
GlobalUnlock
GlobalAlloc
GlobalFree
LoadLibraryW
GetProcAddress
Sleep
FreeLibrary
SetLastError
TlsAlloc
GetVersionExW
DeleteFileW
GetDriveTypeW
FindFirstFileW
FindClose
GetFileAttributesW
CopyFileW
WriteFile
CreateFileW
ReadFile
SetFilePointer
GetFileSize
GetLocalTime

comctl32

InitCommonControls
CreateStatusWindowW
InitCommonControlsEx

user32

CharUpperW
GetPropW
GetParent
RemovePropW
FillRect
GetIconInfo
DrawStateW
GetClientRect
SendMessageW
InvalidateRect
CallWindowProcW
SetPropW
SetWindowLongW
DestroyWindow
ShowWindow
IsZoomed
GetWindowLongA
SendMessageA
MoveWindow
MessageBoxW
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
CreateWindowExW
GetSysColor
GetSysColorBrush
GetWindowLongW
PostMessageW
ValidateRect
GetWindowRect
MapWindowPoints
PeekMessageW
TranslateMessage
DispatchMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RedrawWindow
DefWindowProcW
GetWindow
SetActiveWindow
UnregisterClassW
DestroyAcceleratorTable
LoadIconW
LoadCursorW
RegisterClassW
AdjustWindowRectEx
GetSystemMetrics
GetActiveWindow
CreateAcceleratorTableW
MsgWaitForMultipleObjects
GetMessageW
TranslateAcceleratorW
GetMenu
SetCursorPos
LoadImageW
SetCursor
SystemParametersInfoW
GetKeyState
SetCapture
GetCursorPos
ReleaseCapture
EnumChildWindows
DefFrameProcW
SetFocus
GetFocus
IsChild
GetClassNameW
DestroyIcon

gdi32

GetObjectType
GetObjectW
DeleteObject
IntersectClipRect
GetStockObject
SetBkColor
SetTextColor
CreateSolidBrush
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

oleaut32

SysFreeString
VariantInit
DispGetParam
SysAllocString
VariantClear
SysStringLen

ole32

CoInitialize
CreateStreamOnHGlobal
GetHGlobalFromStream
OleInitialize
RevokeDragDrop

shell32

ShellExecuteExW

wsock32

closesocket
WSACleanup
WSAStartup
socket
inet_addr
gethostbyname
htons
connect
ioctlsocket

Sections

.code
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a0364efd77e6a70df071e746f18a2fe

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

oleaut32

ole32

shell32

wsock32

Sections

.code Size: 4KB - Virtual size: 3KB

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 700B

.code
Size: 4KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 700B