1b8aa20838719ac06eb8d7e3ccc8d074_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1b8aa20838719ac06eb8d7e3ccc8d074_JaffaCakes118
Size

140KB
MD5

1b8aa20838719ac06eb8d7e3ccc8d074
SHA1

65f4990c99747a91b3b07f4c7a2f6efbc06b9e10
SHA256

f23653e113c97de055741a490249ad6a98e27801414e0dd2e225074e95900619
SHA512

e6237c2f7a775d7dbc16795d5a7f5170205c68abf5d2455f66a8ecbd787f573db4a4f62c852e2e9658f81afa91762f9f9c4e21fee0cf8d11243d9c3cee9e8e7a
SSDEEP

3072:m208gnPyvLFxiVstEANyZBvF0MajDaorAW7y39QYNaOzL:AqTFYViEANyLvFFafaKArQEaOzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8aa20838719ac06eb8d7e3ccc8d074_JaffaCakes118

Files

1b8aa20838719ac06eb8d7e3ccc8d074_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f29729870c67e7af068f3c36ab22243

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\ccpfcdjtUMcQja\rKXfKklSas\kkTsAelio.pdb

Imports

user32

DialogBoxIndirectParamW
GetWindow
CharLowerBuffW
LoadIconW
SetWindowRgn
DrawMenuBar
GetMenuItemCount
MessageBoxA
GetClassInfoExA
CharPrevW
wsprintfA
GetForegroundWindow
DefFrameProcW
MoveWindow
FindWindowExW
SetWindowPos
EndPaint
ReleaseDC
LoadImageW
DrawFocusRect
WaitMessage
SystemParametersInfoW
GetScrollPos
CharLowerA
IsChild
CharToOemA
GetMenuStringW
DestroyIcon
ShowWindow
SendMessageA
SetMenuItemBitmaps
GetWindowLongA
SetCursor
FindWindowA
ClientToScreen
EndDialog
GetAltTabInfoW
DispatchMessageA
PostThreadMessageW
AppendMenuW
CreateIconIndirect
GetWindowPlacement
DialogBoxIndirectParamA
GetScrollRange
LoadAcceleratorsW
GetScrollInfo
CheckMenuItem
DrawFrameControl
LoadIconA
ExitWindowsEx
TranslateAcceleratorW
ScrollWindow
DrawTextW
MapVirtualKeyW
DeferWindowPos
GetWindowLongW
CharUpperBuffW
LoadCursorA
EnumThreadWindows
GetKeyboardLayout
LoadBitmapW
GetUserObjectInformationW
IsCharUpperA
GetKeyState
SetTimer
CheckRadioButton
DispatchMessageW
InvertRect
DragObject
DefWindowProcW
CallWindowProcW
GetPropW
GetDialogBaseUnits
IsCharLowerA
DestroyCaret
GetSubMenu
DestroyCursor
SetCursorPos
SwitchToThisWindow
TileWindows
ActivateKeyboardLayout
GetWindowTextLengthW
CheckMenuRadioItem
GetUserObjectInformationA
GetNextDlgTabItem
InsertMenuA
DrawStateA
ArrangeIconicWindows
RegisterClassExA
LoadBitmapA
GetMonitorInfoW
LoadAcceleratorsA
CharNextW
SendDlgItemMessageA
TranslateAcceleratorA
MonitorFromRect
GetAsyncKeyState
DefDlgProcA
CopyAcceleratorTableW
LoadStringW
DestroyAcceleratorTable
CreateIconFromResource
LoadImageA
CopyRect
GetDC
CharNextA
UnionRect
ShowOwnedPopups
FillRect
GetKeyboardLayoutNameW
GetDoubleClickTime
BeginPaint
DrawTextA
SendMessageTimeoutW
ShowWindowAsync
GetMessageExtraInfo
ShowCaret
GetWindowRect

gdi32

WidenPath
BeginPath
PtInRegion
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SetDIBColorTable
SetBitmapDimensionEx
ExcludeClipRect
LineDDA
SaveDC
GetCurrentObject
SetRectRgn
RectVisible
GetTextExtentExPointW
GetClipBox
PathToRegion
CreateBitmap
GetPaletteEntries
GetFontData
EnumFontsW
DeleteDC
CreateDiscardableBitmap
CreateHatchBrush
GetLayout
PolyBezier
GetWindowOrgEx
CreateBrushIndirect
IntersectClipRect
StartPage
GetObjectA
BitBlt
SetTextAlign
RealizePalette
GetROP2
CreateBitmapIndirect
Polygon
CreateFontIndirectW
TranslateCharsetInfo
SetBkColor
FillRgn
CombineRgn
EndPath
SetTextColor
GetBitmapBits
CreateRoundRectRgn
EndDoc
SetLayout

comctl32

ImageList_GetIcon
ImageList_Create
ImageList_Write
ImageList_GetImageCount
ImageList_Read
ImageList_Draw

msvcrt

_controlfp
__set_app_type
__p__fmode
clearerr
iswalpha
__p__commode
strcpy
toupper
wcscmp
isupper
fread
strtoul
setlocale
wcsncpy
wcsrchr
swprintf
isalpha
clock
_amsg_exit
_initterm
putc
strcoll
wcstombs
wcscat
towupper
strerror
_acmdln
fputc
atoi
exit
_ismbblead
gets
wcscpy
_XcptFilter
strncmp
isdigit
iswdigit
putchar
_exit
tolower
fclose
_cexit
realloc
wcstok
free
vsprintf
__setusermatherr
gmtime
__getmainargs

comdlg32

GetOpenFileNameW
PrintDlgExW
ChooseFontW
GetFileTitleW
GetSaveFileNameA

kernel32

FindResourceA
OpenEventA
SetHandleInformation
SetCommTimeouts
SetErrorMode
GetModuleHandleA
DuplicateHandle
GetFileTime
GetCommandLineW
FindResourceW
WaitForSingleObjectEx
GetShortPathNameW
MoveFileA
FindNextFileW
EnumResourceLanguagesA
GetFileAttributesA
InitializeCriticalSection
GetCommTimeouts
GetFullPathNameW
VerSetConditionMask
LocalAlloc
IsDBCSLeadByte
FoldStringW
HeapAlloc
CreateDirectoryW
GetTimeFormatA
GetCommProperties
GetBinaryTypeA
TransactNamedPipe
LoadLibraryW
CreateEventA
ReleaseSemaphore
VirtualQuery
QueryDosDeviceW
OpenSemaphoreW
ReleaseMutex
GetCommState
GetTempFileNameA
GetCommConfig
WinExec
WaitCommEvent
SetSystemTimeAdjustment
LCMapStringW
CreateDirectoryA
GetTempPathW
GetSystemDirectoryW
SetFileApisToOEM
HeapSize
GlobalMemoryStatus
GetFullPathNameA
GetModuleFileNameW
IsBadCodePtr

Exports

Exports

?BitCounterArrayIdeDunAs@@YGKGE@Z

Sections

.text
Size: 9KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5f29729870c67e7af068f3c36ab22243

Headers

File Characteristics

PDB Paths

Imports

user32

gdi32

comctl32

msvcrt

comdlg32

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 133KB

.rsrc Size: 110KB - Virtual size: 110KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 9KB - Virtual size: 133KB

.rsrc
Size: 110KB - Virtual size: 110KB

.reloc
Size: 19KB - Virtual size: 19KB