54fe91dfc0fd1207141f7a7619bfbbe9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

54fe91dfc0fd1207141f7a7619bfbbe9_JaffaCakes118
Size

224KB
MD5

54fe91dfc0fd1207141f7a7619bfbbe9
SHA1

746f3553ec962f1eded2b764aeef36c4e8605503
SHA256

ae678c4c8b4862cf9e57da81ca9b06d8975c98b1080a01246dad4a4046cf17ca
SHA512

0ed0ac456f20671edbbfa7b75f29e134c3155816cadfd7ba7e4e22082038552d6a24ad04a11eb8df2d524ccaae48f7c41e7e364b0501c6563b5e9730cba6bb5c
SSDEEP

3072:LwMxwtshL9YCOQGxhF+jUQfvNBFy8Jn6OfVuLZ5qb:8yw69FOQGxhWUQfnFy8J/tM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54fe91dfc0fd1207141f7a7619bfbbe9_JaffaCakes118

Files

54fe91dfc0fd1207141f7a7619bfbbe9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9ab13baf3866200f189d1a74147ab13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnhookWindowsHookEx
WindowFromPoint
GetClipboardData
GetMenuItemInfoA
PostMessageA
DispatchMessageW
OemToCharA
GetMenuState
EqualRect
GetTopWindow
EnumThreadWindows
GetKeyState
ShowOwnedPopups
SetClassLongA
GetLastActivePopup
GetForegroundWindow
SetScrollPos
DestroyCursor
GetKeyboardType
MapVirtualKeyA
GetSystemMetrics
SetForegroundWindow
RegisterClipboardFormatA
GetMenuItemID
MessageBoxA
SetWindowsHookExA
FillRect
DrawTextA
OpenClipboard
WaitMessage
GetIconInfo
GetKeyboardLayout
EnumWindows
SetActiveWindow
LoadCursorA
IsChild
RemovePropA
LoadIconA
CreateWindowExA
KillTimer
EnableMenuItem
InvalidateRect
EnableWindow
GetParent
AdjustWindowRectEx
GetKeyboardState
GetMessagePos
ScreenToClient
CharNextA
CharLowerBuffA
GetDC
DestroyWindow
GetScrollPos
UnregisterClassA
GetClassLongA
GetFocus
ActivateKeyboardLayout
CharNextW
MoveWindow
GetWindow
GetWindowLongA
DefFrameProcA
DestroyIcon
SetParent
IsIconic
PeekMessageW
DrawFrameControl
RegisterClassA
wsprintfA
IsWindowUnicode
InsertMenuA
SetFocus
PeekMessageA
GetPropA
GetClientRect
SetMenu
GetWindowTextA
EnableScrollBar
DrawIcon
SetTimer
GetWindowPlacement
IsDialogMessageA
GetWindowDC
FrameRect
DestroyMenu
SetMenuItemInfoA
EmptyClipboard
LoadKeyboardLayoutA
SendMessageA
DrawEdge
PostQuitMessage
BeginPaint
GetClassInfoA
SetCapture
SetPropA
DrawMenuBar
GetCapture
GetWindowRect
IsZoomed
EndPaint
IsDialogMessageW
MessageBeep
InflateRect
RedrawWindow
TranslateMDISysAccel
SendMessageW
GetCursorPos
IntersectRect
GetMenuStringA
GetMenuItemCount
TrackPopupMenu
DispatchMessageA
SetWindowTextA
IsWindowVisible
GetDlgItem
GetCursor
SetScrollInfo
GetSysColor
GetClassNameA
SetScrollRange
ReleaseCapture
OffsetRect
UpdateWindow
CallWindowProcA
IsWindow
IsRectEmpty
LoadStringA
PtInRect
SetWindowLongW
GetSysColorBrush
GetDesktopWindow
MapWindowPoints
CharToOemA
TranslateMessage
DeleteMenu
CloseClipboard
ShowScrollBar
SetWindowLongA
CharLowerA
GetSubMenu
ScrollWindow
SetWindowPos
GetSystemMenu
GetScrollRange
SetClipboardData
CharUpperBuffA
ChildWindowFromPoint
GetWindowLongW
CreateMenu
SetCursor
SetRect
GetMenu
ReleaseDC
SetWindowPlacement
LoadBitmapA
DrawIconEx
DrawAnimatedRects
GetDCEx
CallNextHookEx
GetWindowThreadProcessId
GetActiveWindow
GetKeyboardLayoutNameA
CheckMenuItem
GetKeyNameTextA
RegisterWindowMessageA
SystemParametersInfoA
CreateIcon
GetScrollInfo
EnumChildWindows
InsertMenuItemA
MsgWaitForMultipleObjects
CreatePopupMenu
DefWindowProcA

msvcrt

tan
strlen
atan
malloc
memcpy
time
_acmdln
srand

advapi32

RegEnumKeyExA
GetUserNameA
RegOpenKeyExA

gdi32

GetBitmapBits
GetObjectA
CreateBrushIndirect
GetRgnBox
CreateFontIndirectA
GetClipBox
CreateCompatibleDC
GetDIBColorTable
GetPaletteEntries
GetPixel

kernel32

CloseHandle
GetEnvironmentStrings
InitializeCriticalSection
GetLocalTime
GetFileAttributesA
GetCommandLineW
MoveFileExA
CompareStringA
ResetEvent
CreateEventA
GlobalDeleteAtom
lstrlenW
GetCommandLineA
GetModuleHandleA
VirtualAllocEx
GetCurrentProcess
CreateFileA
HeapDestroy
GlobalFindAtomA
lstrlenA
GlobalAlloc
GetVersionExA
GetProcAddress
ExitProcess
EnumCalendarInfoA
GetLastError
LoadLibraryA
IsBadReadPtr
SetErrorMode
GetModuleFileNameA
ExitThread

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 1010B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc8
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc7
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9ab13baf3866200f189d1a74147ab13

Headers

File Characteristics

Imports

user32

msvcrt

advapi32

gdi32

kernel32

Sections

.text Size: 58KB - Virtual size: 58KB

.data Size: 131KB - Virtual size: 131KB

.rsrc0 Size: 1010B - Virtual size: 1010B

.rsrc5 Size: 1KB - Virtual size: 1KB

.rsrc2 Size: 1KB - Virtual size: 1KB

.rsrc8 Size: 6KB - Virtual size: 6KB

.rsrc7 Size: 2KB - Virtual size: 2KB

.rsrc Size: 992B - Virtual size: 992B

.text
Size: 58KB - Virtual size: 58KB

.data
Size: 131KB - Virtual size: 131KB

.rsrc0
Size: 1010B - Virtual size: 1010B

.rsrc5
Size: 1KB - Virtual size: 1KB

.rsrc2
Size: 1KB - Virtual size: 1KB

.rsrc8
Size: 6KB - Virtual size: 6KB

.rsrc7
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 992B - Virtual size: 992B