ed0d08a68497ae94495a79ddf23afcb7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ed0d08a68497ae94495a79ddf23afcb7_JaffaCakes118
Size

210KB
MD5

ed0d08a68497ae94495a79ddf23afcb7
SHA1

f2295ccb2703e069ab7e1c4f467b9df431e80780
SHA256

fff4b81c80a4f703c6c23bdbae300a2454948693418d4a80c4b5281b726cd344
SHA512

279482924d45d1fdadbd9b95fe3d60d6d914c10810f2392fe35198001f34a9f1c2bea83157d29bfff9759b73cd9b9de5c39932edfb01be92612090d33212be6e
SSDEEP

3072:1TVkynmiJoL8O9y63dm3N+lltpnGvMVi8WmfH/HTC2z8qEV6ie4wXCbvZ6PN:zkymiiLx9yJY3nGsRWYHf22eVgu6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed0d08a68497ae94495a79ddf23afcb7_JaffaCakes118

Files

ed0d08a68497ae94495a79ddf23afcb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

S:\avuymIrz\fbzRefdPcv\xZtGqBqgb.pdb

Imports

msvcrt

_controlfp
calloc
floor
wcschr
towlower
__set_app_type
strchr
__p__fmode
qsort
iswxdigit
iswalpha
__p__commode
wcsncmp
free
towupper
fputs
getenv
clock
swprintf
putchar
puts
mbtowc
iswspace
tolower
_amsg_exit
printf
_initterm
_ismbblead
_XcptFilter
strncmp
remove
strtol
wcslen
_exit
_cexit
isspace
strcpy
__setusermatherr
strncpy
iswdigit
iswctype
malloc
__getmainargs
swscanf

user32

GetMenuItemInfoW
GetLastActivePopup
FindWindowExA
HideCaret
GetUserObjectInformationW
EqualRect
TranslateAcceleratorW
ChildWindowFromPoint
TileWindows
LoadMenuA
EnableScrollBar
GetMenuItemCount
FindWindowA
MessageBoxExW
InSendMessage
MonitorFromPoint
GetWindow
ShowScrollBar
LoadImageA
DialogBoxIndirectParamA
MapVirtualKeyA
RemovePropW
GetUpdateRgn
RegisterClassA
SetDlgItemTextA
DrawMenuBar
GetMenu
PostMessageW
GetDlgCtrlID
VkKeyScanW
GetIconInfo
MapWindowPoints
CharNextW
SendMessageTimeoutA
CharLowerBuffW
GetWindowLongW
WaitForInputIdle
MapVirtualKeyExW
CheckRadioButton
AllowSetForegroundWindow
MessageBoxA
GetMessageA
SetMenuDefaultItem
MessageBoxW
GetMenuStringW
LoadMenuW
GetSystemMetrics
SendMessageA
GetMenuState
DrawIcon
DestroyCursor
AdjustWindowRect
GetSysColor
HiliteMenuItem
AppendMenuW
CheckMenuRadioItem
LoadStringW
ScrollWindow
CharPrevW
SetSysColors
GetDlgItem
SetMenuItemBitmaps
GetDesktopWindow
GetParent
EndTask
CreateMenu
GetCaretPos
SendMessageW
InsertMenuItemW
CreatePopupMenu
GetMonitorInfoW
MapVirtualKeyW
FrameRect
EnableMenuItem
UnloadKeyboardLayout
WindowFromPoint
DrawAnimatedRects
ScrollWindowEx
SetRect
SetDlgItemInt
BeginPaint
CreateIconIndirect
SetMenuItemInfoW
SetScrollInfo
CharToOemA
SendNotifyMessageW
GetClassNameW
TranslateAcceleratorA
ShowCursor
SetWindowTextA
CharLowerA
InsertMenuW
AppendMenuA
GetWindowDC
SetRectEmpty
GetSysColorBrush
ShowWindow
ChangeMenuW
OemToCharA
IsCharAlphaW
SystemParametersInfoW
RegisterClassW
ShowWindowAsync
wsprintfA
SetWindowLongW
SwitchToThisWindow
wsprintfW
IsDialogMessageA
GetKeyboardType
EnumChildWindows

gdi32

CreateRectRgnIndirect
CreateBrushIndirect
PtVisible
SelectPalette
CreateDIBitmap
ResizePalette
MoveToEx
CreateFontIndirectA
Ellipse
DeleteDC
ExtTextOutW
CreateBitmap
RectVisible
Escape
SetDIBColorTable
OffsetViewportOrgEx
GetBitmapBits
DeleteObject
CreateHatchBrush
CreatePolygonRgn
CombineRgn
SetBitmapBits
PolyBezier
SetAbortProc
OffsetRgn
WidenPath
CreateSolidBrush
GetTextMetricsA
GetPaletteEntries
CreateICW
SelectClipRgn
SetBitmapDimensionEx
SetBrushOrgEx
SelectObject
GetTextExtentPoint32A
FillRgn
CreateEllipticRgnIndirect
GetPixel
GetStockObject
GetCurrentObject
GetROP2
CreateRectRgn
StartDocW
BitBlt
BeginPath
RealizePalette

kernel32

FindFirstFileW
LeaveCriticalSection
DeleteFileA
InitializeCriticalSection
CallNamedPipeW
SetErrorMode
GetTempFileNameA
CreateWaitableTimerW
FindFirstFileA
HeapLock
RemoveDirectoryW
CreateFileMappingW
LocalSize
GetShortPathNameA
GetModuleHandleW
WriteFile
GlobalSize
CreateSemaphoreW
GetFileAttributesExW
ResetEvent
SleepEx
lstrcpynW
CreateEventA
GetSystemDirectoryW
VerSetConditionMask
LoadLibraryExW
TlsGetValue
IsBadReadPtr
GetShortPathNameW
GetUserDefaultLangID
LocalLock
ConvertDefaultLocale
GetLocaleInfoA
CreateMutexW
SetFileApisToOEM
EscapeCommFunction
SetThreadContext
MoveFileExA
GetThreadLocale
UnlockFile
AddAtomW
GetSystemTimeAdjustment
WaitForMultipleObjects
GetTempPathA
GetFileSize
lstrcmpiW
GlobalFree
CreateFileMappingA
OpenFile

comdlg32

PrintDlgExW
PageSetupDlgW
ChooseColorW
GetFileTitleW
GetSaveFileNameA

shlwapi

PathFileExistsA

Exports

Exports

?HideKeyboardNew@@YGXD<V

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

PDB Paths

Imports

msvcrt

user32

gdi32

kernel32

comdlg32

shlwapi

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 71KB

.data Size: 135KB - Virtual size: 195KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 71KB - Virtual size: 71KB

.data
Size: 135KB - Virtual size: 195KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB