07e127db8abd2591555514c2b86f6976_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

07e127db8abd2591555514c2b86f6976_JaffaCakes118
Size

219KB
MD5

07e127db8abd2591555514c2b86f6976
SHA1

eed0c74e3734b6f4ee884ab22e48ad639febd729
SHA256

4c1d6d9b29a6623dc78b4712243c20c0d13ab79ad4015439e11e73f876f5800e
SHA512

939ad4a13c18cccba24d4e900ff97d4d6d9cda18bbc2f2285205fd98afa678d304afd5a6a4647679e2b5cc00fe152c086cbe667e2cb4bbdd8bb8f276bfa085f9
SSDEEP

6144:51+DHtonus0AJfqR6NwhK3h89HNKnu4K+TK:+5dsFJyR6NwhA8pNKugTK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e127db8abd2591555514c2b86f6976_JaffaCakes118

Files

07e127db8abd2591555514c2b86f6976_JaffaCakes118
.exe windows:5 windows x86 arch:x86

307e3be9ec97a45101631fbca5f21286

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\Kbdtoividf\vtgbqaR\VSthsTrwmif\PPwchmoxtJuiIE\vlDbbscpcsmxw.pdb

Imports

psapi

GetProcessImageFileNameW

kernel32

LocalFree
GetTempFileNameW
GetStringTypeExW
SetEndOfFile
OpenFile
GetProcessHeap
FindFirstFileA
GetTimeFormatW
WaitForMultipleObjectsEx
SetTimerQueueTimer
FindFirstChangeNotificationW
ReadFile
CreateNamedPipeA
GlobalReAlloc
GetUserDefaultUILanguage
CreatePipe
IsBadReadPtr
VerSetConditionMask
HeapFree
HeapAlloc
FindNextFileA
SetupComm
FindResourceW
SearchPathA
GetDateFormatW
CopyFileW
GetLocaleInfoW
lstrlenA
OpenEventW
IsValidLocale
GetUserDefaultLCID
HeapSize
FreeResource
ResetEvent
LeaveCriticalSection
EnumResourceLanguagesA
GetSystemTimeAdjustment
OpenSemaphoreW
RegisterWaitForSingleObject
GetVersion
SetFileApisToOEM
MulDiv
FormatMessageW
GetSystemDirectoryW
LoadResource
GetSystemWindowsDirectoryW
GetFullPathNameW
SleepEx
OpenFileMappingA
GetComputerNameExW
GetShortPathNameA
FlushViewOfFile
SetFileAttributesW
GetVersionExA
UnmapViewOfFile

user32

keybd_event
DrawTextA
DrawFrameControl
GetMenuCheckMarkDimensions
GetMenu
ActivateKeyboardLayout
CloseDesktop
ToUnicodeEx
DeferWindowPos
FindWindowW
IsIconic
ScrollWindow
CharNextA
GetDlgItem
GetWindowTextLengthW
SetScrollRange
TranslateMessage
InflateRect
LoadImageW
LoadImageA
SetMenu
CharUpperBuffW
ReleaseDC
TranslateAcceleratorW
GetDlgCtrlID
ClientToScreen
LoadMenuA
MessageBoxA
GetSysColor
CheckRadioButton
GetScrollInfo
CreateWindowExW
DialogBoxParamA
GetMonitorInfoW
SwapMouseButton
OpenDesktopW
GetSysColorBrush
CharNextExA
GetWindowDC
InSendMessageEx
SetWindowRgn
RegisterClassExW
IsMenu
CopyAcceleratorTableW
CharToOemBuffA
CheckMenuItem
CharPrevW
GetCursorPos
CreateDialogParamW
SetWindowPlacement
GetScrollPos
GetScrollRange
ClipCursor
OemToCharBuffA
RegisterClassW
ShowScrollBar
MonitorFromRect
AppendMenuW
CreateIconIndirect
LookupIconIdFromDirectory
CharUpperA
DialogBoxIndirectParamA
mouse_event
WindowFromPoint
GetSystemMenu
LoadBitmapW
AttachThreadInput
GetDCEx
CharLowerA
SetForegroundWindow
SetLastErrorEx
BeginPaint
CreateMenu
CharToOemW
DefDlgProcW
SetSysColors
DrawIconEx
SystemParametersInfoW
DrawTextW
AdjustWindowRect
CharLowerW
EnumChildWindows
SendMessageA
AdjustWindowRectEx
CheckDlgButton
FindWindowA
SetPropW
GetKeyboardLayout
CharNextW
CreateWindowExA
wvsprintfA
GetKeyNameTextW
SendDlgItemMessageW
OffsetRect
DestroyCaret
CreateCaret
MessageBoxW
IsChild
GetWindowLongW
PostThreadMessageA
DestroyWindow
PostMessageA
GetClassInfoW
DeleteMenu
PostQuitMessage
GetClassLongA
GetMenuItemCount
GetClientRect

msvcrt

putc
printf
_controlfp
atoi
wcstok
getc
clock
wcsrchr
setlocale
putchar
__set_app_type
fflush
__p__fmode
__p__commode
_amsg_exit
bsearch
gmtime
_initterm
isprint
strtoul
ftell
isdigit
floor
_ismbblead
wcscspn
swscanf
wcstod
strtol
_XcptFilter
fwrite
wcstombs
localtime
wcscpy
_exit
vswprintf
fclose
_cexit
calloc
iswdigit
__setusermatherr
qsort
strchr
strerror
__getmainargs

gdi32

PatBlt
SetWindowExtEx
TextOutA
CreatePolygonRgn
SetBrushOrgEx
SetTextAlign
EnumFontFamiliesW
GetViewportOrgEx
CreateCompatibleBitmap
SetPixel
CreatePatternBrush
SelectClipRgn
SetBitmapBits
CreateEllipticRgnIndirect
GetTextExtentExPointW
SetViewportOrgEx
SetWindowOrgEx
IntersectClipRect
StartPage
SetBkMode
GetClipBox
LPtoDP
GetSystemPaletteEntries
CreateFontIndirectW
EndPath
EnumFontsW
CreateDIBSection
UnrealizeObject
CreateRectRgnIndirect
CreateHatchBrush
StretchBlt
CreateDIBitmap
GetMapMode
GetNearestColor
DeleteDC
GetObjectW
EnumFontFamiliesExW
SetMapMode
BeginPath
Polyline
EndDoc
GetTextAlign
GetTextFaceW
GetSystemPaletteUse

comctl32

ImageList_Create
CreatePropertySheetPageW
CreateStatusWindowW
ImageList_SetIconSize
ImageList_Remove
PropertySheetW

Exports

Exports

?SetMessageW@@YGPAFPADPADJPAH]A
?ShowProviderA@@YGPAMNFJN]A

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.packed
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

307e3be9ec97a45101631fbca5f21286

Headers

File Characteristics

PDB Paths

Imports

psapi

kernel32

user32

msvcrt

gdi32

comctl32

Exports

Exports

Sections

.text Size: 193KB - Virtual size: 193KB

.packed Size: 13KB - Virtual size: 13KB

.data Size: 9KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 193KB - Virtual size: 193KB

.packed
Size: 13KB - Virtual size: 13KB

.data
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB