56f7bc2d27a32da7c493b49f1b4eb196_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

56f7bc2d27a32da7c493b49f1b4eb196_JaffaCakes118
Size

180KB
MD5

56f7bc2d27a32da7c493b49f1b4eb196
SHA1

201d6a141f68bba4fe91afb33abe166885f1b7de
SHA256

71d59b549627dd147fa558ce6816f9a8286959cbe45281f27b2e9f6da5703be4
SHA512

593a948f26fa2723230ae759e1fad6fff334f71355abb287d8f3b4b3e2a99d70b12de61116441036055be6bd6ec94d89e702854fe4dcefbf2b2fe1d156f3ac13
SSDEEP

1536:A4yU+8uOZdegVb+sUmgj7lnb+oXMfGfHan89lG:AJU+8/ZFisUhjxn2fGf6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f7bc2d27a32da7c493b49f1b4eb196_JaffaCakes118

Files

56f7bc2d27a32da7c493b49f1b4eb196_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e71b95bf4c1d587ebe5aa7be482e7552

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
SetEvent
ExpandEnvironmentStringsW
lstrcmpiW
HeapReAlloc
CloseHandle
GetOEMCP
GetCurrentThreadId
VirtualAlloc
FindResourceA
LoadLibraryW
LocalAlloc
IsValidCodePage
GetCurrentProcess
ExitProcess
HeapAlloc
CreateEventW
GetDriveTypeA
RaiseException
GetVersion
LCMapStringW
IsDebuggerPresent
GetModuleHandleA
DeviceIoControl
GetThreadLocale

msvcrt

wcsncpy
_purecall
_controlfp
wcsncmp
_ftol
fprintf
strtoul
__p__iob
_rotl
ctime
_wcslwr
srand
rand
_ultoa
__set_app_type
malloc
_finite
fclose
_snwprintf
_rotr
_wcsnicmp
__initenv
_stat
_CIpow
_lock
_local_unwind2
printf
atoi
_wfopen
swprintf
_ltoa
strchr
__p__fmode
sscanf
wcsrchr
qsort
__p__osver

user32

GetDlgCtrlID
CharNextA
IsChild
SendMessageW
OffsetRect
GetMenu
DefWindowProcW
GetDC
GetClassNameW
GetMessageW
GetWindowRect
IsDlgButtonChecked
IntersectRect
GetWindowLongW
GetMenuItemCount
FindWindowW
BeginPaint
GetCapture
SetWindowLongA
RegisterClassExW
MoveWindow
EnableWindow
GetSysColorBrush
GetWindowTextW
SystemParametersInfoW
ScreenToClient
SetDlgItemTextW
GetActiveWindow
GetDlgItem
GetProcessWindowStation
CreateWindowExW
GetClassNameA
SetCursor

ole32

GetHGlobalFromStream
OleRun
CoReleaseMarshalData
CreateOleAdviseHolder
CLSIDFromString
CoInitializeSecurity
CoDisconnectObject
CoFreeUnusedLibraries
CoGetObjectContext
CreateBindCtx
CoInitializeEx
OleRegGetUserType
CoTaskMemRealloc
CoSetProxyBlanket
CoRevertToSelf
CoRevokeClassObject
CoCreateInstance
CoInitialize
OleCreateStaticFromData
CoGetClassObject
OleSaveToStream
PropVariantCopy
CreateStreamOnHGlobal
StgOpenStorage
PropVariantClear
CoImpersonateClient
CreateDataAdviseHolder
CoRegisterClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoTaskMemFree

comdlg32

GetOpenFileNameW
GetFileTitleW
GetFileTitleA
GetSaveFileNameW
PrintDlgA
ChooseColorA
GetOpenFileNameA
PageSetupDlgA
ChooseFontW
PrintDlgExW
FindTextW
ChooseFontA
GetSaveFileNameA
ChooseColorW
CommDlgExtendedError

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 71KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 68KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e71b95bf4c1d587ebe5aa7be482e7552

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

ole32

comdlg32

Sections

.text Size: 9KB - Virtual size: 9KB

DATA Size: 29KB - Virtual size: 29KB

.idata Size: 71KB - Virtual size: 80KB

BSS Size: 68KB - Virtual size: 120KB

.text
Size: 9KB - Virtual size: 9KB

DATA
Size: 29KB - Virtual size: 29KB

.idata
Size: 71KB - Virtual size: 80KB

BSS
Size: 68KB - Virtual size: 120KB