56d3b591e87950e2d772642d53545ecc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

56d3b591e87950e2d772642d53545ecc_JaffaCakes118
Size

111KB
MD5

56d3b591e87950e2d772642d53545ecc
SHA1

035e3364801a46ae5852d44b5afb17be97bcc807
SHA256

c3f3082d44292d3dc8d653f7209ecb4c8569399e197a7b0965ac016ecbce3469
SHA512

750a06a8c7d30c7155d78e8166c6d0fcac441bb9d8927887f7050bc4d044cb86ac028483ccc044cdf8b8f7ef353dfe15ea0c6fa0828d3838277a7340ef025262
SSDEEP

1536:GjdXiqpbYBVz5Kiek7tE272jEaVIM/ay5edscZCA:K3FYn5KieKR8Z5ed5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56d3b591e87950e2d772642d53545ecc_JaffaCakes118

Files

56d3b591e87950e2d772642d53545ecc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e377373d3e0bc6c16e456c588f962cb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateCompatibleBitmap
SaveDC

user32

KillTimer
SetActiveWindow
SetClassLongA
GetClassInfoA
MessageBoxA
GetActiveWindow
GetScrollRange
FrameRect
ScrollWindow
SetParent
GetMenuItemCount
TrackPopupMenu
DestroyMenu
OemToCharA
DrawTextA
IsRectEmpty
GetCapture
GetDesktopWindow
GetWindowDC
DeleteMenu
UnregisterClassA
DefFrameProcA
ReleaseCapture
SetWindowPos
GetWindowThreadProcessId
GetClipboardData
SystemParametersInfoA
OffsetRect
SendMessageW
GetDCEx
IsWindowEnabled
GetSysColor
BeginPaint
FindWindowA
ChildWindowFromPoint
GetMenuState
SetCapture
PeekMessageW
PtInRect
LoadCursorA
DispatchMessageW
TranslateMessage
CreateIcon
GetFocus
DestroyWindow
IsIconic
ShowOwnedPopups
MsgWaitForMultipleObjects
ShowWindow
GetWindowLongW
MapVirtualKeyA
SetScrollInfo
GetWindowLongA
CallWindowProcA
SetClipboardData
PostQuitMessage
SetRect
CharLowerA
EqualRect
GetSubMenu
EnumThreadWindows
DrawAnimatedRects
UpdateWindow
DefWindowProcA
GetSystemMenu
GetMessagePos
ActivateKeyboardLayout
DispatchMessageA
GetParent
RegisterClassA
ShowScrollBar
CloseClipboard
CreateWindowExA
DrawFrameControl
GetMenuItemID
GetLastActivePopup
GetPropA
GetMenu
GetKeyNameTextA
GetSysColorBrush
GetMenuItemInfoA
CreateMenu
LoadIconA
SetScrollPos
PeekMessageA
PostMessageA
wsprintfA
IsChild
MapWindowPoints
GetIconInfo
FillRect
InflateRect
RemoveMenu
DrawEdge
DrawIcon
SetWindowTextA
GetKeyboardLayoutList
LoadBitmapA
GetClassNameA
GetScrollPos
MoveWindow
GetSystemMetrics
DrawMenuBar
RemovePropA
DestroyCursor
GetCursorPos
GetTopWindow
GetDlgItem
SetCursor
EnableWindow
CheckMenuItem
WindowFromPoint
GetClassLongA
AdjustWindowRectEx
GetForegroundWindow
ClientToScreen
SetMenu
EnumWindows
SetWindowLongW
UnhookWindowsHookEx
IsDialogMessageA

shlwapi

SHSetValueA
PathIsDirectoryA
PathGetCharTypeA
SHGetValueA
SHEnumValueA
PathIsContentTypeA

oleaut32

SafeArrayGetElement
OleLoadPicture
SysStringLen
SysAllocStringLen

comdlg32

GetOpenFileNameA
ChooseColorA
GetFileTitleA
GetSaveFileNameA

kernel32

GlobalFindAtomA
WriteFile
CreateFileA
GetModuleFileNameA
SetThreadLocale
GetEnvironmentStrings
SetLastError
lstrlenA
WideCharToMultiByte
GetStartupInfoA
ExitProcess
FreeResource
GetCurrentProcess
VirtualAlloc
GetCurrentThreadId
HeapDestroy
GetLocaleInfoA
InitializeCriticalSection
SetErrorMode
EnterCriticalSection
GetDateFormatA
GetFullPathNameA
SizeofResource
GetCPInfo
lstrcmpA
MulDiv
GetProcAddress
MoveFileExA
GetUserDefaultLCID
FreeLibrary
GetOEMCP
GetModuleHandleA
LocalFree
GlobalAddAtomA
SetFilePointer
GetVersionExA
SetEvent
CreateEventA
VirtualFree
HeapFree
GetLocalTime
VirtualAllocEx
GetFileType
lstrcmpiA
CompareStringA
GetCurrentProcessId
GetFileAttributesA
GetThreadLocale
RaiseException
GetStringTypeW
FindResourceA
GetProcessHeap
GetCurrentThread
GetACP
DeleteFileA
lstrcatA
WaitForSingleObject
GlobalAlloc
LoadLibraryA
LoadLibraryExA
GetVersion
HeapAlloc

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetDesktopFolder

version

GetFileVersionInfoSizeA

msvcrt

strcmp
calloc
memmove
tan

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e377373d3e0bc6c16e456c588f962cb6

Headers

File Characteristics

Imports

gdi32

user32

shlwapi

oleaut32

comdlg32

kernel32

shell32

version

msvcrt

Sections

.text Size: 31KB - Virtual size: 30KB

.bss Size: 1024B - Virtual size: 598B

.edata Size: 78KB - Virtual size: 77KB

.text
Size: 31KB - Virtual size: 30KB

.bss
Size: 1024B - Virtual size: 598B

.edata
Size: 78KB - Virtual size: 77KB