15489110a1bcedc7a6e4289fff3b8f5a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15489110a1bcedc7a6e4289fff3b8f5a_JaffaCakes118
Size

206KB
MD5

15489110a1bcedc7a6e4289fff3b8f5a
SHA1

e55f29b2d941ba6f1e05d53fb43f7101d00f3784
SHA256

49366470ab19ecd21d9df03bd429f3afc62c94adfd47c734659287cea17d2825
SHA512

d3a7e2255a9a3d91f670e3ab9c83d21f8bef62a9d5cc28bf6d4023b32531c1aa2781fb84b554d9c482f7b97c25c41138f64b238ef78eb5e7e92ae231b0840fb1
SSDEEP

3072:GUT8IMelMF+Ur+Q8hmZvQ90N9u50ARS2qbTINl0B6gkCOagp8bXZG:TTlM+VAZyN2ARAHIT0qCOdp8bXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15489110a1bcedc7a6e4289fff3b8f5a_JaffaCakes118

Files

15489110a1bcedc7a6e4289fff3b8f5a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6621b835561a627389e22b3a321633d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\xXmcfvgzt\EFJbjgah\jwlbdhpabwe.pdb

Imports

user32

RegisterClassW
GetScrollPos
LoadBitmapA
ClipCursor
SetMenuDefaultItem
SetSysColors
IsWindowVisible
GetWindow
IsWindowEnabled
OpenIcon
LoadCursorA
TranslateAcceleratorW
CreatePopupMenu
CharUpperA
IsWindowUnicode
GetMessageExtraInfo
CloseDesktop
OpenInputDesktop
SystemParametersInfoA
SetMenuItemInfoW
ReleaseDC
InvalidateRect
SwitchToThisWindow
KillTimer
keybd_event
CheckRadioButton
IsRectEmpty
IsCharAlphaNumericW
DrawMenuBar
TabbedTextOutW
GetDCEx
SetWindowRgn
DestroyAcceleratorTable
SetPropW
PtInRect
SetUserObjectInformationW
PeekMessageA
CharToOemW
InflateRect
DrawIcon
DrawFrameControl
GetNextDlgGroupItem
SendInput
DefFrameProcA
DefWindowProcA
DialogBoxParamA
RegisterClassA
CopyAcceleratorTableW
GetSystemMenu
DrawStateW
FindWindowA
CreateWindowExA
EnableWindow
CharUpperW
RegisterHotKey
AdjustWindowRectEx
MessageBoxW
MessageBoxExA
GetTopWindow
SetMenu
FindWindowExA
LoadMenuA
MessageBoxA
EqualRect
ToUnicodeEx
GetWindowTextLengthW
TileWindows
GetClipCursor
MapDialogRect
LoadStringA
HiliteMenuItem
GetMenuItemCount
LookupIconIdFromDirectory
IntersectRect
GetDoubleClickTime
GetKeyboardType
GetAsyncKeyState
CharLowerBuffW
DialogBoxParamW
CharLowerW
ChangeMenuW
LockWindowUpdate
IsWindow
MapVirtualKeyExW
SetRectEmpty
GetClassLongA
MapWindowPoints
TranslateAcceleratorA
CheckMenuRadioItem
SetScrollInfo
AllowSetForegroundWindow
DispatchMessageA
CharNextW
FrameRect
OffsetRect
InvalidateRgn
SetForegroundWindow
SetActiveWindow
IsChild
UnloadKeyboardLayout
IsIconic
GetMenuStringA
LoadMenuW
RegisterWindowMessageW
SetCursor
GetMessageW
GetForegroundWindow
CreateDialogParamW
GetClassLongW

kernel32

RemoveDirectoryW
LeaveCriticalSection
SetFileAttributesW
VirtualQuery
HeapCreate
SetCurrentDirectoryA
OpenEventA
lstrlenA
GetThreadLocale
UnhandledExceptionFilter
VirtualFree
GetComputerNameA
CreateEventW
CancelIo
UnmapViewOfFile
Sleep
GetLastError
GetProcAddress
FreeLibrary
GetDateFormatA
GetTimeFormatA
VerifyVersionInfoW
GlobalReAlloc
CreateMailslotW
SetCommTimeouts
GetSystemTime
GetSystemDirectoryW
IsBadReadPtr
HeapAlloc
EnumResourceTypesA
LoadLibraryExA
CompareStringA
SetErrorMode
CreateRemoteThread
GlobalFlags
WaitForSingleObject
GetNumberFormatW
WideCharToMultiByte
GetSystemDefaultUILanguage
GetWindowsDirectoryW
AddAtomA
ClearCommError
lstrcmpiA
SetThreadContext
CreateWaitableTimerA
lstrcmpiW
CreateFileW
SizeofResource
LoadLibraryW
GetACP
LockFile

comdlg32

ChooseFontW
PrintDlgW
GetOpenFileNameW
FindTextW

msvcrt

_controlfp
__set_app_type
__p__fmode
fgetc
__p__commode
mbstowcs
_amsg_exit
fseek
_initterm
wcstok
isalnum
time
wcscat
strcpy
strcoll
wcstombs
clearerr
strcspn
strchr
swscanf
_ismbblead
qsort
towlower
malloc
system
wcspbrk
vswprintf
_XcptFilter
vsprintf
fputc
localtime
fflush
wcschr
_exit
calloc
setvbuf
isprint
ungetc
wcstoul
_cexit
bsearch
__setusermatherr
__getmainargs
putchar

comctl32

InitCommonControlsEx
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetIcon

gdi32

EnumFontFamiliesExW
SetDIBColorTable
ExtTextOutW
CreateICW
CombineRgn
DeleteDC
GetDeviceCaps
GetBitmapBits
SaveDC
BeginPath
GetTextExtentPoint32A
CreatePolygonRgn
CreateDIBitmap
DeleteObject
GetPixel
CreateBrushIndirect
GetTextMetricsA
CreateBitmap
SetBitmapDimensionEx
CreateFontIndirectA
SelectPalette
RoundRect
CreateSolidBrush
GetCurrentObject
CreateRectRgn
SetAbortProc
SelectClipRgn
CreateFontW
EnumFontsW
GetFontData
MoveToEx
GetPaletteEntries
TextOutW
SetBitmapBits
PatBlt
OffsetViewportOrgEx
FillRgn
CreateEllipticRgnIndirect
GetTextExtentPointW
ResizePalette
SetBrushOrgEx
OffsetRgn
TextOutA
RealizePalette

shlwapi

PathFindExtensionA

Exports

Exports

?GenerateState@@YGPAJPAFHMPAF<V

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6621b835561a627389e22b3a321633d8

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comdlg32

msvcrt

comctl32

gdi32

shlwapi

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 134KB - Virtual size: 198KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 134KB - Virtual size: 198KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB