01382e40968c64ba5f50b8c3af972b6a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01382e40968c64ba5f50b8c3af972b6a_JaffaCakes118
Size

78KB
MD5

01382e40968c64ba5f50b8c3af972b6a
SHA1

9f248864498ec74ebc71a3e0281d8a3f2b78ff40
SHA256

54ef3d9274fb17e0de892f9ae074ed0747d669d3afba8493fdb0ec1ba66bfe3f
SHA512

47729bf4ab6f663b1f5ea62cf25d834dd30473ee0ed0ed3b35b4901c69065ea9d92d9be12022e6b2acd5a140c2e1b20de55341e79549bbf4d03767d4b58b4b0a
SSDEEP

1536:6ykioc4BkvZLBh0uEq2PvPygbATIBaqaqZRR5Mgh:62B4mhLBCpagb+qDjjh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01382e40968c64ba5f50b8c3af972b6a_JaffaCakes118

Files

01382e40968c64ba5f50b8c3af972b6a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

20e13c3b5c0c698fdd9243c28c3bb702

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\aNRJyfdwrndNP\XCukqxorqo\wiqtBhxWi\sxxekmtugcKHM.pdb

Imports

user32

FindWindowA
GetClassInfoA
DestroyCaret
GetUpdateRect
GetDlgItem
ScrollWindowEx
IntersectRect
OpenDesktopW
DefDlgProcA
ClipCursor
ShowCaret
RegisterWindowMessageW
IsCharAlphaW
SetScrollRange
LoadStringW
GetClassInfoExW
GetMenuState
GetClassInfoW
EnumWindows
ValidateRect
InsertMenuItemW
SetForegroundWindow
DialogBoxParamA
MapVirtualKeyExW
CheckRadioButton
LoadImageW
GetMessageA
DrawAnimatedRects
GetWindowPlacement
SendMessageW
DeferWindowPos
DispatchMessageW
PostMessageA
GetLastActivePopup
GetPropW
AllowSetForegroundWindow
GetWindowDC
ShowScrollBar
GetWindowTextLengthW
DrawTextW
GetMessageW
SetFocus
wsprintfA
ArrangeIconicWindows
GetTopWindow
CharUpperA
EnumChildWindows
SetMenuItemBitmaps
TrackPopupMenu
CharToOemW
DrawIcon
PostMessageW
GetSysColor
GetMessagePos
CreateDialogParamA
GetKeyboardLayoutList
SetMenuDefaultItem
InsertMenuA
CreateWindowExW
MessageBoxA
DrawStateA
wvsprintfW
FindWindowW
PostThreadMessageA
DefWindowProcW
LoadMenuW
CopyRect
RegisterClassExA
SendNotifyMessageW
RemoveMenu
SetUserObjectInformationW
GetMenuItemID
SetMenuItemInfoW
SendMessageTimeoutA
GetNextDlgGroupItem
WindowFromPoint
CharPrevW
SetCursor
CharNextW
LoadMenuA
IsDialogMessageA
CascadeWindows
SetDlgItemInt
BeginDeferWindowPos
LoadAcceleratorsA
IsZoomed
SystemParametersInfoA
SendDlgItemMessageW
LoadImageA
IsWindowUnicode
TranslateAcceleratorA
CreateCaret
SetScrollInfo
EnableMenuItem
GetKeyNameTextW
DestroyMenu
MonitorFromRect
LoadCursorW
CreateAcceleratorTableW
GetKeyboardType
PeekMessageA
GetClassNameW
SetRect
CreateDialogIndirectParamW
VkKeyScanW
SetWindowPos
SetDlgItemTextW
FillRect
GetMenuItemInfoW
wsprintfW
SetTimer
SetLastErrorEx
AttachThreadInput
LoadIconW
ExitWindowsEx
UnloadKeyboardLayout
EndDialog
HiliteMenuItem

kernel32

GlobalMemoryStatus
ConnectNamedPipe
GetLocaleInfoW
GetWindowsDirectoryA
GetCurrentThreadId
FileTimeToDosDateTime
MulDiv
GetComputerNameExA
HeapUnlock
SetFileApisToOEM
SetNamedPipeHandleState
SetUnhandledExceptionFilter
DeviceIoControl
FindResourceExA
GetProcAddress
FindResourceW
CreateFileMappingA
WaitForMultipleObjects
GetSystemDefaultUILanguage
FindNextChangeNotification
OpenFileMappingA
FindFirstFileW
TryEnterCriticalSection
GetCommandLineA
TlsGetValue
GetFileInformationByHandle
CancelWaitableTimer
MapViewOfFile
LeaveCriticalSection
GetPriorityClass
GlobalLock
WaitForSingleObjectEx
HeapValidate
lstrlenW
GlobalUnlock
GlobalFindAtomW
GetTickCount
CreateWaitableTimerA
GetCommConfig
HeapSize
EscapeCommFunction
SetLocalTime
lstrcmpA
GetThreadContext
GetShortPathNameA
DeleteFileW
CreateNamedPipeA
SetEndOfFile
GetCommProperties
GetSystemTimeAdjustment
MoveFileExW
lstrcatA
QueryPerformanceCounter
EnumResourceTypesA
SuspendThread

msvcrt

_controlfp
exit
strcoll
wcsstr
gmtime
__set_app_type
strncmp
wcscoll
tolower
wcscspn
towlower
wcstol
isalnum
strtok
perror
wcschr
remove
fgets
__p__fmode
fputs
strncpy
__p__commode
wcstod
wcspbrk
_amsg_exit
strpbrk
ungetc
clock
isupper
_initterm
bsearch
puts
wcslen
mbtowc
calloc
memset
strcspn
_ismbblead
_XcptFilter
setvbuf
_exit
atoi
_cexit
__setusermatherr
strtoul
__getmainargs
fputc
vswprintf

comctl32

ImageList_Read
PropertySheetW
ImageList_AddMasked
ImageList_Draw
CreateToolbarEx
InitCommonControlsEx

Exports

Exports

?ReadInfoFile@@YGK_KHE:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erts
Size: 512B - Virtual size: 83B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.info
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20e13c3b5c0c698fdd9243c28c3bb702

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

msvcrt

comctl32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.init Size: 6KB - Virtual size: 5KB

.erts Size: 512B - Virtual size: 83B

.wall Size: 512B - Virtual size: 39KB

.info Size: 512B - Virtual size: 192B

.data Size: 3KB - Virtual size: 2KB

.udata Size: 11KB - Virtual size: 10KB

.rsrc Size: 32KB - Virtual size: 31KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 21KB

.init
Size: 6KB - Virtual size: 5KB

.erts
Size: 512B - Virtual size: 83B

.wall
Size: 512B - Virtual size: 39KB

.info
Size: 512B - Virtual size: 192B

.data
Size: 3KB - Virtual size: 2KB

.udata
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 32KB - Virtual size: 31KB

.reloc
Size: 2KB - Virtual size: 1KB