00e53405cdc27d8d1016e2be971808c1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

00e53405cdc27d8d1016e2be971808c1_JaffaCakes118
Size

185KB
MD5

00e53405cdc27d8d1016e2be971808c1
SHA1

b67f8842bf6f1d5e5258fe52f12a8943580c38e1
SHA256

8c19f6171d469fe5d4fed2463c1ef852849211c43b0196e37c08a4ed016be2b5
SHA512

508cc347da6f7d8ba8e56505a2d857314da0e3a4c1010ec53ad2c2317f9b2ae051b9db49f5732199f150cd58432d5e1272bdd72862263f141731e547ef8f2dec
SSDEEP

3072:POFkIGhBURhgXJNvWFF5QkwwMxyQfmVFm5lyCvmHmQ0ta+lvMjaOzL:PB4SXDvSDWhz+v8PmHia+lmaOzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e53405cdc27d8d1016e2be971808c1_JaffaCakes118

Files

00e53405cdc27d8d1016e2be971808c1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

975d939508e86272b9cb8e47baa13c1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\ksmoxdexYa\DQqptdrostcI\miMgaczo.pdb

Imports

msvcrt

swscanf
clearerr
srand
isalnum
isspace
iswspace
toupper
towlower
strcspn
fgetc
_controlfp
wcscat
strrchr
ungetc
strtol
iswdigit
__set_app_type
wcscspn
fread
__p__fmode
strspn
wcsncmp
calloc
isupper
__p__commode
gets
qsort
isxdigit
getenv
isalpha
strcpy
_amsg_exit
wcsrchr
towupper
setvbuf
remove
_initterm
fgets
_acmdln
exit
mbtowc
_ismbblead
iswxdigit
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs

gdi32

RestoreDC
CreatePolygonRgn
GetObjectW
EnumFontFamiliesExW
GetDIBColorTable
GetFontData
SetDIBColorTable
CreateDCW
GetBitmapBits
SetBkMode
DeleteObject
LineDDA
SetAbortProc
StretchBlt
GetTextExtentPoint32W
SetWindowOrgEx
SetPaletteEntries
GetTextAlign
MoveToEx
OffsetRgn
SelectPalette
GetNearestColor
CreateDIBitmap
PatBlt
CreateBrushIndirect
ExtTextOutA
EnumFontFamiliesW
RectVisible
CreateDiscardableBitmap
Ellipse
ScaleViewportExtEx
CreatePen
CreateHalftonePalette
CreateFontIndirectA
LPtoDP
GetTextMetricsW
SetRectRgn
GetTextExtentPointA
BeginPath
TextOutA
GetRgnBox
OffsetViewportOrgEx
CreatePalette
GetTextExtentExPointW
SelectClipRgn
GetClipBox
GetTextMetricsA
GetPixel
CreateBitmap
GetWindowOrgEx
SetWindowExtEx

kernel32

GetStartupInfoW
FindFirstFileA
lstrcpynW
GetModuleHandleW
GetStartupInfoA
SetCurrentDirectoryW
DeleteCriticalSection
GetThreadTimes
SetCommTimeouts
GlobalFindAtomW
FormatMessageA
GetComputerNameA
EnterCriticalSection
SearchPathA
GetModuleFileNameW
GetTempFileNameA
lstrcmpiW
GetComputerNameW
SetThreadPriority
GetSystemDefaultUILanguage
ResetEvent
SetLocalTime
GetSystemDirectoryW
LoadLibraryW
TlsFree
GetDateFormatW
GetBinaryTypeA
GetWindowsDirectoryW
GetVersion
VerSetConditionMask
MoveFileExW
WinExec
EnumResourceLanguagesA
GetThreadPriority
lstrcatA
SetFilePointer
MoveFileA
MoveFileW
GetTempPathA
EnumResourceNamesW
CreateNamedPipeW
GlobalFlags
GetFileAttributesA
GetStdHandle
FreeLibrary
UnmapViewOfFile
ExitThread
CreateEventW
SetTimerQueueTimer
CompareStringW
OpenFileMappingA
TransactNamedPipe
ResumeThread
GetHandleInformation
SearchPathW
HeapValidate

user32

RegisterClassA
GetIconInfo
IsCharUpperA
ArrangeIconicWindows
CharNextW
ShowWindowAsync
SetTimer
CreateDialogParamW
CharLowerW
MonitorFromRect
InsertMenuW
InflateRect
SetMenuItemBitmaps
GetScrollInfo
SetUserObjectInformationW
IntersectRect
CharPrevA
DialogBoxParamW
DrawStateW
ScrollWindow
LoadBitmapW
IsCharAlphaNumericW
DrawEdge
MapVirtualKeyA
LoadIconA
GetDlgCtrlID
CharPrevW
OpenIcon
GetSystemMenu
SendMessageW
wsprintfW
EnumChildWindows
CheckMenuRadioItem
SetWindowRgn
InsertMenuA
GetLastActivePopup
DefFrameProcW
DragObject
DefDlgProcA
PostQuitMessage
DefWindowProcW
DestroyIcon
GetMessageTime
ReplyMessage
GetClassLongA
CreateIconIndirect
MonitorFromPoint
MapVirtualKeyExW
AdjustWindowRectEx
GetDlgItem
OffsetRect
wvsprintfW
SendMessageTimeoutW
LoadMenuA
GetKeyboardLayout
CreateAcceleratorTableW
WaitMessage
GetClientRect
GetScrollPos
SetCaretPos
GetMenuStringA
GetSystemMetrics
RegisterClassW
FillRect
SetWindowPos
TranslateMessage
CheckMenuItem
IsCharAlphaW
CreateDialogParamA
InternalGetWindowText
IsZoomed
SendInput
OpenInputDesktop
InsertMenuItemW
IsIconic
SetFocus
LoadBitmapA
GetKeyNameTextW
GetMessageExtraInfo
GetWindowTextA
GetSubMenu
GetKeyboardLayoutNameW
GetUserObjectInformationA
UnloadKeyboardLayout
WaitForInputIdle
SwitchToThisWindow
SetDlgItemInt
OemToCharBuffA
SystemParametersInfoW
GetUserObjectInformationW
ShowCursor
GetMenuState
ShowOwnedPopups
GetMenuItemCount
wvsprintfA
LoadImageA
GetMessageW
GetCursorPos
FindWindowA
PostThreadMessageW
RedrawWindow
GetKeyState
GetAltTabInfoW
ShowScrollBar
CallWindowProcW
HideCaret
SystemParametersInfoA
IsWindowVisible
GetClassLongW
GetWindowLongA
GetScrollRange
GetDC
RegisterWindowMessageW
GetAsyncKeyState
WindowFromPoint
GetDoubleClickTime
GetMenuItemID
PostThreadMessageA
DrawIcon
SetWindowPlacement
LoadMenuW

Exports

Exports

?BitCounterArrayIdeDunAs@@YGKGE@Z

Sections

.text
Size: 9KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

975d939508e86272b9cb8e47baa13c1a

Headers

File Characteristics

PDB Paths

Imports

msvcrt

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 193KB

.rsrc Size: 155KB - Virtual size: 154KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 9KB - Virtual size: 193KB

.rsrc
Size: 155KB - Virtual size: 154KB

.reloc
Size: 19KB - Virtual size: 19KB