039933d3ee659369d6ed4d6404901e48_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

039933d3ee659369d6ed4d6404901e48_JaffaCakes118
Size

209KB
MD5

039933d3ee659369d6ed4d6404901e48
SHA1

0565e304c771939c66678a390592770df267fb80
SHA256

5805afb7825ed16b05d0daedf40774805b7c4eda990e94dbf7bd6b85876a3e69
SHA512

fccbe13f14c04875aedc4396b453766306af9f3fe0fbac5abea5ea6801af2ec45c347aade8bdee86fe957fed667b566d982c6cbe02444a44be16f518d21e0a51
SSDEEP

6144:FqvA/7O3s0aqdoI3G2i5q0Ib3LscAfeegdP:Fqa7O3s0aGW2iSJAfeea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039933d3ee659369d6ed4d6404901e48_JaffaCakes118

Files

039933d3ee659369d6ed4d6404901e48_JaffaCakes118
.exe windows:5 windows x86 arch:x86

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

S:\avuymIrz\fbzRefdPcv\xZtGqBqgb.pdb

Imports

msvcrt

_controlfp
calloc
floor
wcschr
towlower
__set_app_type
strchr
__p__fmode
qsort
iswxdigit
iswalpha
__p__commode
wcsncmp
free
towupper
fputs
getenv
clock
swprintf
putchar
puts
mbtowc
iswspace
tolower
_amsg_exit
printf
_initterm
_ismbblead
_XcptFilter
strncmp
remove
strtol
wcslen
_exit
_cexit
isspace
strcpy
__setusermatherr
strncpy
iswdigit
iswctype
malloc
__getmainargs
swscanf

user32

GetMenuItemInfoW
GetLastActivePopup
FindWindowExA
HideCaret
GetUserObjectInformationW
EqualRect
TranslateAcceleratorW
ChildWindowFromPoint
TileWindows
LoadMenuA
EnableScrollBar
GetMenuItemCount
FindWindowA
MessageBoxExW
InSendMessage
MonitorFromPoint
GetWindow
ShowScrollBar
LoadImageA
DialogBoxIndirectParamA
MapVirtualKeyA
RemovePropW
GetUpdateRgn
RegisterClassA
SetDlgItemTextA
DrawMenuBar
GetMenu
PostMessageW
GetDlgCtrlID
VkKeyScanW
GetIconInfo
MapWindowPoints
CharNextW
SendMessageTimeoutA
CharLowerBuffW
GetWindowLongW
WaitForInputIdle
MapVirtualKeyExW
CheckRadioButton
AllowSetForegroundWindow
MessageBoxA
GetMessageA
SetMenuDefaultItem
MessageBoxW
GetMenuStringW
LoadMenuW
GetSystemMetrics
SendMessageA
GetMenuState
DrawIcon
DestroyCursor
AdjustWindowRect
GetSysColor
HiliteMenuItem
AppendMenuW
CheckMenuRadioItem
LoadStringW
ScrollWindow
CharPrevW
SetSysColors
GetDlgItem
SetMenuItemBitmaps
GetDesktopWindow
GetParent
EndTask
CreateMenu
GetCaretPos
SendMessageW
InsertMenuItemW
CreatePopupMenu
GetMonitorInfoW
MapVirtualKeyW
FrameRect
EnableMenuItem
UnloadKeyboardLayout
WindowFromPoint
DrawAnimatedRects
ScrollWindowEx
SetRect
SetDlgItemInt
BeginPaint
CreateIconIndirect
SetMenuItemInfoW
SetScrollInfo
CharToOemA
SendNotifyMessageW
GetClassNameW
TranslateAcceleratorA
ShowCursor
SetWindowTextA
CharLowerA
InsertMenuW
AppendMenuA
GetWindowDC
SetRectEmpty
GetSysColorBrush
ShowWindow
ChangeMenuW
OemToCharA
IsCharAlphaW
SystemParametersInfoW
RegisterClassW
ShowWindowAsync
wsprintfA
SetWindowLongW
SwitchToThisWindow
wsprintfW
IsDialogMessageA
GetKeyboardType
EnumChildWindows

gdi32

CreateRectRgnIndirect
CreateBrushIndirect
PtVisible
SelectPalette
CreateDIBitmap
ResizePalette
MoveToEx
CreateFontIndirectA
Ellipse
DeleteDC
ExtTextOutW
CreateBitmap
RectVisible
Escape
SetDIBColorTable
OffsetViewportOrgEx
GetBitmapBits
DeleteObject
CreateHatchBrush
CreatePolygonRgn
CombineRgn
SetBitmapBits
PolyBezier
SetAbortProc
OffsetRgn
WidenPath
CreateSolidBrush
GetTextMetricsA
GetPaletteEntries
CreateICW
SelectClipRgn
SetBitmapDimensionEx
SetBrushOrgEx
SelectObject
GetTextExtentPoint32A
FillRgn
CreateEllipticRgnIndirect
GetPixel
GetStockObject
GetCurrentObject
GetROP2
CreateRectRgn
StartDocW
BitBlt
BeginPath
RealizePalette

kernel32

FindFirstFileW
LeaveCriticalSection
DeleteFileA
InitializeCriticalSection
CallNamedPipeW
SetErrorMode
GetTempFileNameA
CreateWaitableTimerW
FindFirstFileA
HeapLock
RemoveDirectoryW
CreateFileMappingW
LocalSize
GetShortPathNameA
GetModuleHandleW
WriteFile
GlobalSize
CreateSemaphoreW
GetFileAttributesExW
ResetEvent
SleepEx
lstrcpynW
CreateEventA
GetSystemDirectoryW
VerSetConditionMask
LoadLibraryExW
TlsGetValue
IsBadReadPtr
GetShortPathNameW
GetUserDefaultLangID
LocalLock
ConvertDefaultLocale
GetLocaleInfoA
CreateMutexW
SetFileApisToOEM
EscapeCommFunction
SetThreadContext
MoveFileExA
GetThreadLocale
UnlockFile
AddAtomW
GetSystemTimeAdjustment
WaitForMultipleObjects
GetTempPathA
GetFileSize
lstrcmpiW
GlobalFree
CreateFileMappingA
OpenFile

comdlg32

PrintDlgExW
PageSetupDlgW
ChooseColorW
GetFileTitleW
GetSaveFileNameA

shlwapi

PathFileExistsA

Exports

Exports

?HideKeyboardNew@@YGXD<V

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

PDB Paths

Imports

msvcrt

user32

gdi32

kernel32

comdlg32

shlwapi

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 71KB

.data Size: 134KB - Virtual size: 195KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 71KB - Virtual size: 71KB

.data
Size: 134KB - Virtual size: 195KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB