08191de3ca9e20d5a6556b1ee4374361_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

08191de3ca9e20d5a6556b1ee4374361_JaffaCakes118
Size

148KB
MD5

08191de3ca9e20d5a6556b1ee4374361
SHA1

85c5d86227c0aca98d8b9e98eab7df8d3f09e632
SHA256

0d6471679e771adaa7964b2e1958e503169d17556d7cc6e0753ccb59822f504a
SHA512

fdae69436c98aaf0473f7690428ff4cc203d423972c293aba8b7202b802167413bbd8546a370eacd241046c00f0bdb2187b5458a2f1248c1fa15cb6bf7f627b1
SSDEEP

3072:aSno2RMbZ3rYx5/Ow6X8PZxJbSzsijNVU0Kdd9kM2fUtVBV:a0o2mxg6MhxJbSdNV2dd9kM26z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08191de3ca9e20d5a6556b1ee4374361_JaffaCakes118

Files

08191de3ca9e20d5a6556b1ee4374361_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab1c3f1cf37e3bc86f64f8a0a13ceb4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

I:\ItyprySgo\UdnaMdIlz\eSKckuQpxSwzd\zCtBKoqmyjcb.pdb

Imports

user32

InsertMenuA
EndPaint
CascadeWindows
GetWindowRect
TileWindows
SetDlgItemInt
SendDlgItemMessageA
BeginPaint
GetMessageW
MapVirtualKeyA
SetWindowRgn
CreatePopupMenu
GetMessageExtraInfo
RegisterClassW
ScrollWindow
GetSystemMenu
PeekMessageA
GetGUIThreadInfo
IsDialogMessageA
DispatchMessageW
GetDlgItemTextA
GetParent
ShowWindowAsync
GetDC
CreateWindowExA
CreateIconIndirect
MessageBoxExA
GetWindowLongW
EnableMenuItem
ScrollWindowEx
GetMenuItemInfoW
DestroyCursor
OemToCharBuffA
GetKeyNameTextW
InvalidateRgn
WaitMessage
FrameRect
SetActiveWindow
DialogBoxIndirectParamA
DrawStateW
LoadImageA
GetUserObjectInformationW
GetWindowModuleFileNameW
AttachThreadInput
GetDlgCtrlID
CharToOemW
DrawIcon
OpenIcon
ReplyMessage
GetKeyboardType
GetMessagePos
SendMessageA
DeleteMenu
GetMessageTime
ShowOwnedPopups
SwitchToThisWindow
EnableWindow
SetScrollPos
GetNextDlgTabItem
IsWindowUnicode
DefFrameProcW
DialogBoxParamA
SystemParametersInfoW
IsWindowVisible
DefDlgProcW
RedrawWindow
SetWindowPlacement
InternalGetWindowText
ScreenToClient
GetClipCursor
CharNextExA
GetMenuItemRect
GetFocus
GetMenuCheckMarkDimensions
PostThreadMessageW
GetWindowLongA
GetDlgItemInt
LockWindowUpdate
InflateRect
GetWindow
SetCaretPos
DefWindowProcA
LoadImageW
GetWindowTextLengthW
FillRect
GetLastActivePopup
GetClassInfoExW
MessageBoxExW
ExitWindowsEx
GetKeyState
WindowFromPoint
GetClassInfoW
ChangeMenuW
AdjustWindowRectEx
CopyRect
CharLowerA
ChildWindowFromPoint
OpenInputDesktop
ModifyMenuW
TranslateAcceleratorA
SetScrollRange
LoadIconW
MonitorFromRect
GetShellWindow
SetFocus
GetMenuItemID
DialogBoxIndirectParamW
TranslateAcceleratorW
GetMonitorInfoW
CreateAcceleratorTableW
CopyAcceleratorTableW
RegisterClassA
GetDCEx
GetAsyncKeyState
IsIconic
CreateDialogParamW
GetCaretBlinkTime
CallWindowProcW
CharLowerW
SystemParametersInfoA
MonitorFromPoint
GetSystemMetrics
CreateWindowExW
AdjustWindowRect
GetUpdateRgn

msvcrt

swscanf
gets
_controlfp
malloc
__set_app_type
__p__fmode
__p__commode
putchar
islower
wcspbrk
_amsg_exit
fseek
isprint
gmtime
floor
wcsrchr
exit
_initterm
clock
fprintf
_ismbblead
isdigit
towupper
puts
strtoul
mbstowcs
srand
_XcptFilter
vsprintf
fgetc
fclose
_exit
strcpy
strchr
qsort
fputc
atol
strrchr
fread
tolower
system
towlower
_cexit
__setusermatherr
memset
__getmainargs
wcstoul
wcscoll

shlwapi

StrToIntW

kernel32

SetLocalTime
UnlockFile
LCMapStringA
GetHandleInformation
SetMailslotInfo
LoadLibraryExW
TerminateThread
CreateRemoteThread
DeleteFileW
SetCommBreak
VirtualFree
lstrlenA
GetCurrentThreadId
GetStdHandle
GetOverlappedResult
WaitForMultipleObjectsEx
LoadLibraryExA
EnumSystemLocalesA
GetLocalTime
GetTimeZoneInformation
HeapFree
GetCommTimeouts
HeapAlloc
lstrcmpA
lstrcatA
HeapLock
GlobalCompact
SetErrorMode
SetCommMask
GetWindowsDirectoryA
LoadLibraryW
GetModuleFileNameA
GetThreadPriority
SetWaitableTimer
LocalFree
CreateEventW
SuspendThread
GlobalMemoryStatusEx
VirtualProtect
VerifyVersionInfoW
SetUnhandledExceptionFilter
SetFileApisToOEM
WaitForSingleObject
ReleaseMutex
GetStringTypeExW
SetHandleInformation
GetCommandLineW
GetUserDefaultLangID
GlobalLock
MoveFileA
QueryDosDeviceW
GetFileTime
CreateSemaphoreA
CreateNamedPipeW
GetComputerNameExA
EnumResourceTypesA
SetThreadPriority
GetProcessHeap

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab1c3f1cf37e3bc86f64f8a0a13ceb4d

Headers

File Characteristics

PDB Paths

Imports

user32

msvcrt

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 21KB - Virtual size: 145KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 21KB - Virtual size: 145KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 2KB - Virtual size: 1KB