5663556fb5355e59272fd4bf2120522a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5663556fb5355e59272fd4bf2120522a_JaffaCakes118
Size

98KB
MD5

5663556fb5355e59272fd4bf2120522a
SHA1

c5ad6dc6b568bdd434b9cbcbbe1f8344520b6195
SHA256

11c0d7bbfe22fa7f564528f63581e273d9d5c34a3a50d2e8897144cc8ebecc42
SHA512

188d7dd878b35e2495f53c67da6578dff76718c9e6c0ae77c97c1ebc86e951c3544b49f18834c4e69ffdab0ed3faef7932aec4aa6e7e7f57437a23be50f630ec
SSDEEP

1536:NLOCamqHmKQYuUdxQ0EKFzm+cbn7iC79T7hXWLNK/IejaISxTlYinh:NLXavQXoxQZKBm+u7Z7VdGLNK/IHxTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5663556fb5355e59272fd4bf2120522a_JaffaCakes118

Files

5663556fb5355e59272fd4bf2120522a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11494d4855892879064a3bcfe098f667

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsChild
DefFrameProcA
EnumThreadWindows
GetPropA
GetParent
IsWindowEnabled
EnableMenuItem
EndPaint
CallNextHookEx
DefWindowProcA
GetSysColorBrush
EnableWindow
GetDC
RegisterClassA
GetWindow
EndDeferWindowPos
EqualRect
CreatePopupMenu
GetLastActivePopup
GetScrollPos
GetCapture
GetForegroundWindow
MessageBoxA
GetSubMenu
ShowScrollBar
GetMenuState
GetKeyState
SetWindowTextA
SystemParametersInfoA
GetKeyNameTextA
GetScrollRange
FrameRect
DispatchMessageA
GetClipboardData
GetMenu
EnumChildWindows
DrawTextA
BeginPaint
CharLowerBuffA
GetFocus
GetDCEx
CallWindowProcA
CreateMenu
GetClassInfoA
DrawMenuBar
GetDesktopWindow
GetScrollInfo
GetMenuItemCount
SetTimer
CharLowerA
CharNextA
CreateWindowExA
DrawEdge
GetClientRect
GetCursor
GetMenuItemID
HideCaret
SetCursor
DrawIconEx
GetActiveWindow
EnumWindows
FindWindowA
GetIconInfo
GetSysColor
IsMenu
EnableScrollBar
SetWindowLongA
BeginDeferWindowPos
TrackPopupMenu
GetWindowTextA
IsWindowVisible
CreateIcon
DrawFrameControl
ShowWindow
SetWindowPos
ClientToScreen
GetMessagePos
CharToOemA

gdi32

GetDIBColorTable
BitBlt
CreateDIBitmap
GetObjectA
SelectPalette
RestoreDC

kernel32

SetEndOfFile
lstrcpynA
GetModuleHandleA
GetStringTypeW
SetThreadLocale
FindResourceA
ExitThread
FormatMessageA
GetOEMCP
GetProcAddress
GetDateFormatA
GetCurrentProcess
SetHandleCount
GetLocaleInfoA
lstrcpyA
HeapDestroy
GetLastError
FindFirstFileA
GetVersionExA
VirtualAllocEx
GetEnvironmentStrings
GetCurrentThread
EnumCalendarInfoA
WriteFile
GetLocalTime
GetACP
CompareStringA
FreeLibrary
GetFileSize
lstrlenA
GetCommandLineA
GetCPInfo
FindClose
HeapFree
GetCurrentProcessId
GlobalAlloc
CloseHandle
CreateThread
RaiseException
LoadLibraryExA
Sleep
ResetEvent
GetVersion
LocalFree
lstrcmpA
GetFileAttributesA
GetStdHandle
WideCharToMultiByte
HeapAlloc
GetStringTypeA
VirtualQuery
VirtualFree
GetCurrentThreadId
ReadFile
CreateFileA
GetProcessHeap
LoadLibraryA
LoadResource
GetFullPathNameA
DeleteCriticalSection
GlobalAddAtomA
SetFilePointer
LocalReAlloc
LocalAlloc
FreeResource
GlobalFindAtomA
GetSystemDefaultLangID
SetErrorMode
GetStartupInfoA
GetFileType
MoveFileA
MoveFileExA
MulDiv
GetTickCount
GetModuleFileNameA
SetLastError
ExitProcess
DeleteFileA
GlobalDeleteAtom
LockResource
GetThreadLocale
WaitForSingleObject
VirtualAlloc
CreateEventA
GetUserDefaultLCID
SetEvent

comdlg32

FindTextA
GetOpenFileNameA

shlwapi

PathFileExistsA
SHDeleteValueA
SHGetValueA
SHQueryInfoKeyA
SHQueryValueExA
PathIsDirectoryA

version

VerInstallFileA
VerFindFileA
GetFileVersionInfoA

oleaut32

VariantCopyInd
SysStringLen
VariantChangeType
SafeArrayGetUBound
SafeArrayGetElement
SysAllocStringLen
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex

ole32

ReleaseStgMedium
GetHGlobalFromStream
CoUninitialize
CoGetObjectContext
PropVariantClear
CoGetMalloc
StgOpenStorage

msvcrt

swprintf
wcscspn
rand
exp
strcmp
atol
log
memcpy
calloc
memmove

Sections

CODE
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11494d4855892879064a3bcfe098f667

Headers

File Characteristics

Imports

user32

gdi32

kernel32

comdlg32

shlwapi

version

oleaut32

ole32

msvcrt

Sections

CODE Size: 49KB - Virtual size: 48KB

.idata Size: 47KB - Virtual size: 47KB

.edata Size: 512B - Virtual size: 119B

CODE
Size: 49KB - Virtual size: 48KB

.idata
Size: 47KB - Virtual size: 47KB

.edata
Size: 512B - Virtual size: 119B