0f0d8a8f8f5b0c5ab43028b6e80d1597_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f0d8a8f8f5b0c5ab43028b6e80d1597_JaffaCakes118
Size

171KB
MD5

0f0d8a8f8f5b0c5ab43028b6e80d1597
SHA1

e99c493a0a9ac0a29ec5b1d2d3711cb2f4de0d3e
SHA256

a4f31528f1fac9c970161c53846d06a7593ae41616accb3a794b81d567a6a28a
SHA512

30e57b69ee4c67ff969bde1400a192688cecf883dc02a3eea162b827e5ee95ad4627bc120b780ab4a11189e560ee281cda8bc5a52a6c045d7ed1d52cc409f07f
SSDEEP

3072:Sxhxy+4RIE+3Z/R9JsSdV+jwoilPubdmAEmh5e1NOQlmMv:S/x/4RIEsZ/ZsOhoilPubU9mje1NhlmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f0d8a8f8f5b0c5ab43028b6e80d1597_JaffaCakes118

Files

0f0d8a8f8f5b0c5ab43028b6e80d1597_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c3fe91049c87f3015815fd80c815351a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\vtZywaaxpnj\nzqyxvRTzjj\ushvuhRFdqijSh.pdb

Imports

msvcrt

wcsrchr
wcscspn
fseek
_controlfp
wcschr
wcstod
__set_app_type
swscanf
__p__fmode
__p__commode
_amsg_exit
rand
putchar
atol
towupper
_initterm
_ismbblead
_XcptFilter
fgets
bsearch
strstr
fputc
exit
_exit
printf
malloc
swprintf
_cexit
strncmp
isdigit
calloc
toupper
system
iswdigit
time
fwrite
wcscoll
wcscat
iswctype
__setusermatherr
__getmainargs
fflush
isprint
strpbrk

kernel32

VirtualFree
LocalReAlloc
HeapUnlock
GetProcAddress
FormatMessageA
SetThreadPriority
DefineDosDeviceW
GetCommTimeouts
FileTimeToSystemTime
QueryPerformanceCounter
CreateThread
lstrlenW
FindResourceA
IsDBCSLeadByte
FileTimeToLocalFileTime
WaitForSingleObjectEx
GetAtomNameW
SetSystemTime
SetThreadAffinityMask
HeapCreate
CreateDirectoryW
GetNumberFormatW
GetSystemTimeAdjustment
OpenFileMappingW
GetUserDefaultLCID
FlushViewOfFile
lstrcmpA
GetModuleFileNameW
ExitThread
EnumResourceNamesW
TryEnterCriticalSection
GetUserDefaultLangID
RaiseException
SetThreadExecutionState
GetSystemDirectoryA
SetFileAttributesW
CreateEventW
TlsSetValue
GetCommandLineA
WaitCommEvent
SetCommBreak
GlobalAddAtomA
OpenFileMappingA
GetModuleHandleExW
FlushFileBuffers
TlsFree
DeleteFileW
SetCommState
CreateNamedPipeW
GetCommState
GlobalAddAtomW

comdlg32

FindTextW
ChooseFontW
CommDlgExtendedError
ChooseColorW

comctl32

ImageList_GetImageCount
CreateToolbarEx
CreatePropertySheetPageA
ImageList_Create
ImageList_AddMasked
ImageList_Write

user32

wvsprintfW
LoadMenuA
CreateDialogIndirectParamW
LoadStringW
GetScrollInfo
SendDlgItemMessageW
ActivateKeyboardLayout
ShowCursor
MessageBoxA
CreateIconFromResource
ShowCaret
SendNotifyMessageW
GetMenuItemRect
CharToOemA
CheckMenuItem
TranslateAcceleratorA
RegisterClassA
SetDlgItemInt
InvertRect
ShowScrollBar
CharToOemBuffA
OffsetRect
GetWindowLongW
FillRect
PostThreadMessageA
LoadCursorA
OemToCharA
MonitorFromRect
BringWindowToTop
ChangeMenuW
GetSubMenu
LoadIconW
CreateMenu
IsIconic
SetCursor
EndPaint
CallWindowProcW
IsRectEmpty
IsCharAlphaNumericW
MessageBoxW
SystemParametersInfoA
RegisterWindowMessageW
CheckDlgButton
GetMenuItemInfoW
SystemParametersInfoW
DrawIconEx
GetWindow
GetUserObjectInformationW
DeleteMenu
DialogBoxIndirectParamW
InternalGetWindowText
IsWindow
SetForegroundWindow
PeekMessageA
SetSysColors
InsertMenuA
GetMenuItemID
KillTimer
CharToOemW
ClientToScreen
MonitorFromPoint
SetWindowRgn
LoadMenuW
GetSystemMetrics
IsWindowVisible
DestroyWindow
CreateDialogParamW
DrawIcon
AppendMenuW
CascadeWindows
GetClassInfoA
PostMessageA
LookupIconIdFromDirectory
FindWindowExW
GetWindowRect
GetWindowDC
UnionRect
RegisterClassW
LoadAcceleratorsA
FindWindowExA
CreateCaret
DestroyIcon
DrawStateA
mouse_event
CopyRect
OpenIcon
SetPropW
GetKeyboardLayout
LoadImageW
LoadIconA
GetScrollRange
SendMessageW
SetRectEmpty
IsDialogMessageA
GetNextDlgTabItem
FindWindowW
IsChild
EnableScrollBar
MapDialogRect
DefFrameProcW
PostMessageW
SetDlgItemTextA
PostQuitMessage
IsWindowUnicode
ClipCursor
GetMessageTime
EnumChildWindows
MessageBoxExW
RemoveMenu

gdi32

PtVisible
GetTextColor
UnrealizeObject
CreateDCW
TranslateCharsetInfo
CreatePenIndirect
StretchBlt
PolyBezier
CreateRectRgnIndirect
SetDIBColorTable
SelectObject
CreateHalftonePalette
SetPaletteEntries
GetTextMetricsA
EndDoc
RectVisible
CreateFontIndirectA
CreateBitmap
CreateDIBitmap
RealizePalette
TextOutA
GetROP2
GetPixelFormat
TextOutW
EnumFontFamiliesW
SelectClipRgn
ScaleViewportExtEx
SetDIBits
GetTextFaceW
GetStockObject
MoveToEx
GetCharWidth32W
ExtFloodFill
CreateICW
IntersectClipRect
GetTextCharsetInfo
CreateFontA
LPtoDP
CreateRoundRectRgn
GetRgnBox
GetCurrentObject
CreateBrushIndirect
SetBkColor
GetObjectA
BeginPath

Exports

Exports

?FindSizeOld@@YGMPADJPAEF<V

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3fe91049c87f3015815fd80c815351a

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

comdlg32

comctl32

user32

gdi32

Exports

Exports

Sections

.text Size: 145KB - Virtual size: 145KB

.data Size: 22KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 145KB - Virtual size: 145KB

.data
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB