147f724da50ebb5fa523a9cfb209ecb7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

147f724da50ebb5fa523a9cfb209ecb7_JaffaCakes118
Size

97KB
MD5

147f724da50ebb5fa523a9cfb209ecb7
SHA1

5bb8510fe9bb9298d3386bef9fef705981d5edc7
SHA256

a3e6a7133e9539dbf9604c2ad17560a964c34b4ec9fc764532e2aa7e91fda65e
SHA512

b5f5ca27237963fc71d76415a15598393042d03ed25f076e32fd54958094b2211ae93dad6867649d03a2217d5f7b9703a91137c5b58727d25fa09d4993d5bdf6
SSDEEP

1536:2K0IOBBU9uLg+CYdiEKLYsksK1FsB4OKf97jtau7+zmeuU8X:2K0IOBBGFRvLYskVvi4OSZau7+zmelc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147f724da50ebb5fa523a9cfb209ecb7_JaffaCakes118

Files

147f724da50ebb5fa523a9cfb209ecb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

31329a511ee750d717d937c49d551ba0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\hOclQCeGahxtjP\ZkKopnM\apVVxgvRU\xlxdKNx.pdb

Imports

comctl32

ImageList_AddMasked
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Draw
DestroyPropertySheetPage

msvcrt

putc
sscanf
strtol
atoi
_controlfp
iswprint
fwrite
fseek
setvbuf
strpbrk
wcstombs
strerror
swscanf
__set_app_type
localtime
__p__fmode
__p__commode
time
_amsg_exit
_initterm
isupper
wcscspn
printf
sprintf
_acmdln
floor
exit
toupper
gmtime
_ismbblead
_XcptFilter
wcsncpy
strstr
_exit
_cexit
isspace
__setusermatherr
wcscmp
__getmainargs

kernel32

GetNumberFormatA
GetFileSize
AreFileApisANSI
GetTickCount
lstrcpyW
GlobalGetAtomNameW
CompareStringA
CompareFileTime
EnumResourceTypesA
lstrlenW
GetCommTimeouts
CancelIo
HeapWalk
CreateWaitableTimerA
GetUserDefaultUILanguage
TransactNamedPipe
BuildCommDCBAndTimeoutsW
GetTimeFormatW
FormatMessageA
CopyFileA
ResetEvent
GetFileAttributesExW
SetFileTime
lstrcpynA
FindNextFileW
GetLocaleInfoW
GlobalFree
FindCloseChangeNotification
SetLocalTime
GetLongPathNameW
GlobalHandle
GetModuleFileNameA
HeapUnlock
GetModuleFileNameW
ConnectNamedPipe
SetFileAttributesW
HeapSize
GetComputerNameExA
GetHandleInformation
UnlockFile
GetBinaryTypeW
GetVersion

gdi32

CreateHalftonePalette
SetDIBitsToDevice
SetBrushOrgEx
SetMapMode
SetBkMode
GetTextExtentPoint32W
DeleteObject
GetObjectA
GetCharWidth32W
CreateBrushIndirect
StretchBlt
SetBkColor
PolyBezier
PtVisible
SetTextAlign
Ellipse
GetDIBits
SelectObject
GetPaletteEntries
GetTextMetricsA
WidenPath
GetTextExtentPoint32A
CreateSolidBrush
GetMapMode
ExtTextOutW
Escape
Polygon
CreateFontA
UnrealizeObject
CreateDIBSection
GetStockObject
GetTextMetricsW
RectInRegion
GetBitmapBits
EnumFontFamiliesExW

user32

ClipCursor
LoadCursorW
DrawFocusRect
RegisterClassExW
ArrangeIconicWindows
CharNextExA
ScreenToClient
ShowCursor
ShowScrollBar
CharToOemA
IsIconic
SwitchToThisWindow
DestroyMenu
GetDlgItem
CharUpperA
GetDC
WaitForInputIdle
MessageBoxW
GetPropW
OemToCharA
SetWindowLongW
SetMenu
ShowCaret
MessageBoxExA
GetDialogBaseUnits
CheckRadioButton
GetWindowTextLengthW
SetPropW
GetNextDlgTabItem
GetSystemMenu
SendMessageA
LoadBitmapW
GetSubMenu
DestroyWindow
SendMessageW
FindWindowW
LoadImageW
SetWindowPos
CascadeWindows
AllowSetForegroundWindow
ScrollWindow
CreateDialogIndirectParamW
PostThreadMessageA
IsWindowUnicode
DrawTextA
OffsetRect
GetMenuItemID
CheckDlgButton
GetKeyboardType
PostMessageW
LoadAcceleratorsW
IsWindow
CheckMenuRadioItem
WindowFromPoint
MapVirtualKeyW
AdjustWindowRectEx
ToUnicodeEx
GetClipCursor
SetScrollPos
DestroyCaret
SendMessageTimeoutW
ActivateKeyboardLayout
GetUpdateRgn
GetWindowLongA
RegisterWindowMessageA
SetActiveWindow
GetClientRect
CharUpperW
PeekMessageA
MoveWindow
CreateMenu
EnableMenuItem
GetActiveWindow
InSendMessage
GetClassInfoW
GetWindow
GetClassInfoExW
DrawAnimatedRects
UnionRect
DragObject
DefWindowProcA
DrawMenuBar
SendInput
IsRectEmpty
IsCharLowerA
GetScrollRange
CreateWindowExA
GetMessageTime
GetClassInfoExA

shlwapi

PathStripPathW

Exports

Exports

?SleepAhHJDud@@YGKEPA_WG@Z
?SleepUDSUDlkdlsds@@YGKEPA_WG@Z
?SleepUDudjkUD@@YGKEPA_WG@Z
?SleepYDyjDuUI@@YGKEPA_WG@Z

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 323B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31329a511ee750d717d937c49d551ba0

Headers

File Characteristics

PDB Paths

Imports

comctl32

msvcrt

kernel32

gdi32

user32

shlwapi

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.edata Size: 512B - Virtual size: 323B

.data Size: 19KB - Virtual size: 19KB

.rdata Size: 1024B - Virtual size: 63KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 75KB - Virtual size: 74KB

.edata
Size: 512B - Virtual size: 323B

.data
Size: 19KB - Virtual size: 19KB

.rdata
Size: 1024B - Virtual size: 63KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 2KB - Virtual size: 1KB