14ffe4c5875a8635eb6275d6028f27e6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

14ffe4c5875a8635eb6275d6028f27e6_JaffaCakes118
Size

65KB
MD5

14ffe4c5875a8635eb6275d6028f27e6
SHA1

7a5de304a7df386fb36c32eaff0d81467ef8f140
SHA256

f222ec50fa274088c8f4d8957d996713e0efe2c9dd165111ea4817381dbba633
SHA512

3105049ee3a1073540816c92e8b0ef2b12ed741e94f13bdf412a55cddd6859646b4359927d5f4819278424e417bacb5410101e6666dd8ef19813d0e48459a649
SSDEEP

1536:5RT9tcBkecACiZzJnH+CgBv9jb2Q0NC60hO0VML:bT92Bx5COB+d32RMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ffe4c5875a8635eb6275d6028f27e6_JaffaCakes118

Files

14ffe4c5875a8635eb6275d6028f27e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

05b609f24843ece574c94fb8358a4fcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\Rqzyoeeivtciz\aosXXzJqMWt\zSxTBboffunh.pdb

Imports

kernel32

CreateEventW
lstrlenA
SetThreadAffinityMask
SystemTimeToFileTime
GetSystemTimeAdjustment
SetThreadContext
LocalFree
EnterCriticalSection
GetSystemWindowsDirectoryW
LockFile
ResumeThread
DeleteFileA
TransactNamedPipe
SetSystemTimeAdjustment
HeapLock
CreateDirectoryA
GetDateFormatA
IsValidLocale
GetFileAttributesA
FindResourceExW
LocalAlloc
GetModuleFileNameW
RemoveDirectoryA
HeapWalk
HeapAlloc
InitializeCriticalSection
HeapFree
GetLocaleInfoW
CreateFileMappingA
SetThreadExecutionState
GetModuleHandleA
IsValidLanguageGroup
SetNamedPipeHandleState
lstrcatW
GetProcessHeap
DeleteAtom
CancelIo
MoveFileA
SetThreadPriority
CallNamedPipeW
GetTimeZoneInformation
SizeofResource
GetACP
FindCloseChangeNotification
GetThreadLocale
ResetEvent
GlobalUnlock
CreateMailslotW
CopyFileW
GetBinaryTypeW
GetShortPathNameA
GetSystemDirectoryA
CreateSemaphoreW
SetSystemTime
GetVersionExA
ReleaseMutex
IsBadWritePtr
FindNextFileA

msvcrt

malloc
wcsstr
towlower
_controlfp
tolower
strrchr
__set_app_type
fputs
clearerr
iswalpha
strchr
remove
wcspbrk
__p__fmode
qsort
swscanf
setlocale
__p__commode
atol
_amsg_exit
toupper
wcsncmp
_initterm
vswprintf
strcoll
isspace
fputc
_ismbblead
putchar
realloc
putc
strncpy
perror
sprintf
_XcptFilter
wcstol
gmtime
vsprintf
_exit
isalnum
getenv
_cexit
wcstombs
__setusermatherr
ftell
iswctype
__getmainargs

user32

GetGUIThreadInfo
GetMenuItemID
SystemParametersInfoA
PostMessageA
IsChild
DrawTextW
GetWindowPlacement
IsCharAlphaA
MonitorFromPoint
ShowCursor
SendDlgItemMessageW
CreateIconIndirect
RedrawWindow
EndDialog
DialogBoxParamA
LoadBitmapW
GetWindowLongA
GetCursorPos
SetWindowLongW
SetMenuDefaultItem
DragObject
ShowWindow
OffsetRect
IsDialogMessageA
CallWindowProcW
SetRectEmpty
DrawFocusRect
AttachThreadInput
DefDlgProcA
TrackPopupMenuEx
LoadIconA
LoadCursorA
InSendMessage
SetUserObjectInformationW
OpenIcon
WaitForInputIdle
ChildWindowFromPointEx
DialogBoxIndirectParamA
EnableScrollBar
MessageBoxA
LoadMenuA
GetClipCursor
FindWindowW
BringWindowToTop
GetDlgItem
DrawStateW
CheckDlgButton
DestroyWindow
ActivateKeyboardLayout
PeekMessageA
LoadStringA
RegisterWindowMessageA
AllowSetForegroundWindow
ReleaseDC
IsDialogMessageW
SetClassLongW
BeginDeferWindowPos
SetMenuItemBitmaps
IsIconic
ScrollWindow
DeleteMenu
ScrollWindowEx
GetMenuStringW
MessageBoxExA
CharToOemW
OemToCharBuffA
IsCharAlphaNumericW
SendDlgItemMessageA
AppendMenuW
IsMenu
SetPropW
SetWindowPlacement
DrawMenuBar
VkKeyScanW
SendMessageTimeoutA
GetScrollInfo
LoadBitmapA
EnableMenuItem
AdjustWindowRectEx
GetPropW
DestroyCursor
wvsprintfA
CheckMenuRadioItem
GetKeyNameTextW
UpdateWindow
TileWindows
RemovePropW
CharNextA
SetTimer
GetMenu
GetFocus
keybd_event
GetMessagePos
RegisterHotKey
RegisterClassA
SetScrollRange
MapVirtualKeyA
GetWindowTextA
TranslateAcceleratorA
GetKeyState
SystemParametersInfoW
GetUpdateRect
GetClientRect
CharUpperA
EnumChildWindows
GetDC
FillRect
CopyRect
SendMessageW
GetWindowTextLengthW
GetDlgItemInt
MapVirtualKeyW
CreateCaret
SetWindowLongA
InsertMenuItemW
RegisterClassExW
GetKeyboardLayoutNameW
DestroyAcceleratorTable
GetMonitorInfoW
GetClassNameW
SendInput
CharUpperBuffW

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05b609f24843ece574c94fb8358a4fcb

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 14KB - Virtual size: 29KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 14KB - Virtual size: 29KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 1KB - Virtual size: 1KB