0aabbce1efd14327d50739e1e9be306b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0aabbce1efd14327d50739e1e9be306b_JaffaCakes118
Size

298KB
MD5

0aabbce1efd14327d50739e1e9be306b
SHA1

b778875fff7e8d4df1a7e35108cc686d83c007d2
SHA256

0c48ab92f21bc57cd8f1eb7aae4adb3541f9261da4bc065accdc4bd0fbecaf4c
SHA512

40c62ce6c8fc06f5e00e7987141840937b8c15f370f72ddea676014f832471f1b60f824589e0de5a7eeb16dfc352fffe1e5869200ac96dbcdccda964914ece2e
SSDEEP

6144:LEcEYCW+j1z1p5EmkC+h9A+x3X60zfriGZv2MaVl/s:xD4jV1gmkBhTJq0DrVJCVl/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aabbce1efd14327d50739e1e9be306b_JaffaCakes118

Files

0aabbce1efd14327d50739e1e9be306b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0081c93bc523b5d5c9e5c0fff547fef3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\drVPkeJho\ewyxnQbQjy\NGKBrlzuh\jutuyhniroyE\zdyIjkawzJu.pdb

Imports

gdi32

CreateSolidBrush
GetViewportOrgEx
EnumFontFamiliesExW
SetWindowExtEx
GetRgnBox
StartDocW
GetTextMetricsW
CreateFontA
SelectObject
WidenPath
PtInRegion
CreateCompatibleBitmap
LPtoDP
RoundRect
UnrealizeObject
DeleteObject
GetPixel
CreateHatchBrush
GetFontData
SetTextAlign
SetDIBits
SetDIBitsToDevice
SetROP2
StretchBlt
CreateDIBSection
SetViewportExtEx
GetDeviceCaps
GetNearestPaletteIndex
AddFontResourceW
GetTextExtentPoint32W
CreateBitmap
ScaleWindowExtEx
CombineRgn
CreatePenIndirect
TranslateCharsetInfo
OffsetViewportOrgEx
RealizePalette
TextOutW
SetRectRgn
CreateDCW
GetSystemPaletteEntries
SelectClipRgn
RectVisible
GetCharWidth32W

msvcrt

fputc
_controlfp
getc
isprint
fputs
mbtowc
wcsstr
towupper
__set_app_type
__p__fmode
calloc
wcstok
strtoul
strncpy
swprintf
fwrite
setvbuf
getenv
__p__commode
fflush
puts
fseek
realloc
_amsg_exit
_initterm
_acmdln
wcspbrk
exit
_ismbblead
ungetc
perror
_XcptFilter
strcoll
wcstoul
rand
_exit
time
sprintf
isalpha
_cexit
__setusermatherr
strpbrk
isupper
__getmainargs
strstr
srand

kernel32

IsBadStringPtrW
AddAtomA
MoveFileW
GetTempFileNameW
GetSystemTimeAdjustment
WaitForSingleObjectEx
GetTempPathA
IsDBCSLeadByte
HeapFree
EnumResourceNamesW
GetFileTime
GetThreadLocale
SetEndOfFile
GetTempPathW
SetThreadExecutionState
FindClose
SetCommMask
GetStartupInfoW
DisconnectNamedPipe
SetCommTimeouts
SetThreadAffinityMask
LoadLibraryExA
FindResourceA
SetNamedPipeHandleState
CopyFileW
GetModuleFileNameA
CancelWaitableTimer
GlobalDeleteAtom
GetCPInfo
lstrcmpA
GetModuleFileNameW
GetDateFormatW
WaitCommEvent
SetTimerQueueTimer
SetFileApisToOEM
GetSystemTime
GetSystemDefaultLangID
EnterCriticalSection
AreFileApisANSI
CreateMutexW
VirtualFree
LCMapStringW
SearchPathA
FoldStringW
SetMailslotInfo
GetComputerNameExW
OpenFileMappingW
GetBinaryTypeA
GlobalUnlock
DeleteCriticalSection

comctl32

ImageList_GetIcon
DestroyPropertySheetPage
CreateStatusWindowW
ImageList_ReplaceIcon
ImageList_Read
CreatePropertySheetPageA

user32

CreateCursor
RegisterWindowMessageW
CopyAcceleratorTableW
SetDlgItemTextA
DestroyIcon
SetScrollPos
SetCursor
CharNextW
GetClassInfoExW
CharPrevA
SetCaretPos
CreateIconIndirect
EnumWindows
LoadStringA
GetActiveWindow
AppendMenuA
GetDesktopWindow
GetDialogBaseUnits
CheckDlgButton
GrayStringW
SetWindowPlacement
FindWindowExA
RemoveMenu
BringWindowToTop
DeleteMenu
GetDlgItemInt
wsprintfW
GetClassInfoW
PostThreadMessageA
GetFocus
LoadAcceleratorsW
GetWindowTextA
GetIconInfo
TileWindows
SetCursorPos
GetClientRect
ScrollWindow
CreateDialogParamW
CharUpperBuffA
GetSystemMetrics
GetClassLongW
PostMessageW
IsDialogMessageW
InSendMessage
IsWindowVisible
DialogBoxIndirectParamA
SetUserObjectInformationW
TranslateMessage
DefWindowProcA
UpdateWindow
SwitchToThisWindow
GetSysColor
SendDlgItemMessageW
GetClassNameW
CopyRect
RegisterHotKey
GetKeyState
DefWindowProcW
OpenIcon
mouse_event
BeginDeferWindowPos
CreateMenu
RegisterWindowMessageA
GetMenuItemRect
GetNextDlgGroupItem
GetLastActivePopup
SetTimer
ShowWindow
SetMenuDefaultItem
EnableMenuItem
DefDlgProcA
GetCaretPos
MoveWindow
GetParent
DrawMenuBar
ChildWindowFromPointEx
GetMessagePos
MessageBoxA
VkKeyScanW
SetFocus
GetMenuStringA
FrameRect
CreateIconFromResource
CharToOemA
FindWindowA
DispatchMessageW
DrawTextA
ExitWindowsEx
GetDlgItemTextA
IsWindowEnabled
GetDlgItemTextW
MessageBoxExA
TabbedTextOutW
ActivateKeyboardLayout
FindWindowW
DestroyWindow
PtInRect
GetUpdateRect
AllowSetForegroundWindow
GetClassInfoA
GetWindowLongW
LoadImageA
SetWindowRgn
SetMenu
CreatePopupMenu
SetRectEmpty
SendNotifyMessageW
MapVirtualKeyA
RegisterClassA

Exports

Exports

?SetSizeNew@@YGPAX_NHPAJI@Z
?ModifyDialogEx@@YGGPAIM@Z
?IncrementRectNew@@YGNFHM@Z
?GenerateHeaderOriginal@@YGGPAI@Z
?DataW@@YGPAIPADN@Z
?DecrementStateNew@@YGPAXG@Z
?EnumTimeOld@@YGXM@Z
?RemoveSystemEx@@YGPAKKKPAI@Z
?ModifyListExA@@YGXPAGIPAK@Z
?IsValidScreenOld@@YGNFIME@Z
?HideKeyboardA@@YGPAXIPAM@Z
?CopyEventA@@YGKJPAK@Z
?CopyDataExW@@YGPAXIPAJ@Z
?HidePointOld@@YGXDD@Z
?CallOptionOriginal@@YGHPANNGN@Z
?IsNotProfileExW@@YGPAXPAIM@Z
?CallTimeExW@@YGXJGPAH@Z
?CrtMutexEx@@YGPAHPAKJH@Z
?FormatFile@@YGFHPAEPAD@Z
?CrtWindowInfoExA@@YGPAFDM@Z
?LoadMutexA@@YGKJD@Z
?DeleteScreenNew@@YGPAMII@Z
?FormatKeyNameOld@@YGPAJPAMM@Z
?RemoveDirectoryA@@YGIPAHIJG@Z
?ModifyRectEx@@YGXPAI@Z
?GenerateTimeA@@YGK_NPAMKI@Z
?AddDateW@@YGHPA_NH_N@Z
?RtlFolderEx@@YGPAMFMI@Z
?HideEventOld@@YGJHPAFM@Z
?DecrementMediaTypeA@@YGXG@Z
?GetKeyboard@@YGIFHH@Z
?DeleteMediaTypeA@@YGXG_NPAM@Z
?DeleteEventExW@@YGXPAFJ_NG@Z
?DeleteCommandLineExW@@YGJK@Z
?CallExpressionOld@@YGDM@Z

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dt_i
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dt_e
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0081c93bc523b5d5c9e5c0fff547fef3

Headers

File Characteristics

PDB Paths

Imports

gdi32

msvcrt

kernel32

comctl32

user32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 55KB

.dt_i Size: 6KB - Virtual size: 6KB

.dt_e Size: 1KB - Virtual size: 1KB

.data Size: 13KB - Virtual size: 13KB

.rdata Size: 82KB - Virtual size: 82KB

.rsrc Size: 136KB - Virtual size: 135KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 55KB - Virtual size: 55KB

.dt_i
Size: 6KB - Virtual size: 6KB

.dt_e
Size: 1KB - Virtual size: 1KB

.data
Size: 13KB - Virtual size: 13KB

.rdata
Size: 82KB - Virtual size: 82KB

.rsrc
Size: 136KB - Virtual size: 135KB

.reloc
Size: 2KB - Virtual size: 1KB