211bc433594016c0124985ef6904f2ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

211bc433594016c0124985ef6904f2ed_JaffaCakes118
Size

76KB
MD5

211bc433594016c0124985ef6904f2ed
SHA1

a6e26b5d8de4b93f7a820332a56799020f99ce47
SHA256

a303773ca28f951dfb2f3f670bfee1a1084d77fc1300954dce6472ebbc3a2fc2
SHA512

cf0ab732ce011205655ce11ed7aefed83dba6d9b0d56da9f58531658fb5ea8da449cc9341420eceba8f9104e1d41303f4af94d334a4fdad7c98c0c554d4bfe2e
SSDEEP

1536:vEnBfwbch1NZ8A8EoAoM3lFsQ4p5Z9z5:vEnBIbcHn3okPHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
211bc433594016c0124985ef6904f2ed_JaffaCakes118

Files

211bc433594016c0124985ef6904f2ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

13444baf3991df2590c700aa3f925e7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\Zckzsdnr\MFjrmxNyF\Phfdgjitiakl.pdb

Imports

user32

IsMenu
GetMenuItemID
SetMenuDefaultItem
GetNextDlgTabItem
RegisterClassExW
GetLastActivePopup
SetWindowTextW
PeekMessageA
SetClassLongW
DestroyAcceleratorTable
GetClassLongW
HiliteMenuItem
GetDlgItemTextA
SendDlgItemMessageA
CreateDialogIndirectParamW
CreatePopupMenu
AttachThreadInput
GetMenuItemCount
IsWindowVisible
SetMenu
FindWindowW
GetMenuStringA
TranslateAcceleratorA
SetDlgItemInt
GetClientRect
GetTopWindow
MessageBoxExW
GetNextDlgGroupItem
SendNotifyMessageW
SendMessageTimeoutW
IsWindow
CreateWindowExA
LoadCursorW
GetSysColorBrush
SetForegroundWindow
SetWindowPos
GetCaretPos
CreateIconIndirect
GetUpdateRect
LookupIconIdFromDirectory
GetFocus
DialogBoxParamW
CheckRadioButton
GetUserObjectInformationA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
wcsncmp
_amsg_exit
calloc
_initterm
_acmdln
exit
gets
_ismbblead
_XcptFilter
_exit
strncmp
_cexit
wcstok
islower
swprintf
setlocale
__setusermatherr
fputc
strerror
printf
__getmainargs
isxdigit

kernel32

GetModuleHandleA
EnumSystemLocalesA
CreateDirectoryW
GetShortPathNameW
DefineDosDeviceW
FindCloseChangeNotification
FreeLibrary
HeapAlloc
GetTempPathW
FindResourceA
QueryDosDeviceW
CreateSemaphoreA
IsDBCSLeadByte
GetTickCount
RemoveDirectoryA
GetModuleFileNameA
AddAtomW
GetAtomNameW
VirtualQuery
TryEnterCriticalSection
SetPriorityClass
FileTimeToDosDateTime

shlwapi

StrToIntExW
StrStrIA

gdi32

SetPixel
LineDDA
CreateICW
SetTextColor
ScaleWindowExtEx
GetBkMode
AddFontResourceW
CreateSolidBrush
CreateBrushIndirect
SetDIBitsToDevice
CreateHatchBrush
CreateRectRgn
CreatePen
FillRgn
SetBrushOrgEx
Rectangle
SetBitmapBits
GetViewportOrgEx

Exports

Exports

?ValidateRectOld@@YGXJG~U
?ShowAppNameEx@@YGKPAIPAI~U
?InsertMainStructDlhSi@@YGKGH@Z
?GlobalAnchorEx@@YGPAHFPAG~U
?LoadKeyNameOriginal@@YGIH~U
?MonitorExW@@YGHK~U
?KillDateTimeOld@@YGX_NJPAI~U
?IsPenOriginal@@YGMDPAIF~U

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.redt
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rimp
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdbg1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rit
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdbg2
Size: 512B - Virtual size: 63B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rvar
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rpt
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ping
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dhfyapx
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13444baf3991df2590c700aa3f925e7e

Headers

File Characteristics

PDB Paths

Imports

user32

msvcrt

kernel32

shlwapi

gdi32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.redt Size: 512B - Virtual size: 411B

.rimp Size: 2KB - Virtual size: 2KB

.rdbg1 Size: 512B - Virtual size: 28B

.data Size: 2KB - Virtual size: 1KB

.rit Size: 512B - Virtual size: 500B

.rdbg2 Size: 512B - Virtual size: 63B

.rvar Size: 512B - Virtual size: 44B

.rpt Size: 512B - Virtual size: 316B

.hdata Size: 512B - Virtual size: 268B

.ping Size: - Virtual size: 124KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 2KB - Virtual size: 30KB

dhfyapx Size: - Virtual size: 4KB

.text
Size: 21KB - Virtual size: 20KB

.redt
Size: 512B - Virtual size: 411B

.rimp
Size: 2KB - Virtual size: 2KB

.rdbg1
Size: 512B - Virtual size: 28B

.data
Size: 2KB - Virtual size: 1KB

.rit
Size: 512B - Virtual size: 500B

.rdbg2
Size: 512B - Virtual size: 63B

.rvar
Size: 512B - Virtual size: 44B

.rpt
Size: 512B - Virtual size: 316B

.hdata
Size: 512B - Virtual size: 268B

.ping
Size: - Virtual size: 124KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 2KB - Virtual size: 30KB

dhfyapx
Size: - Virtual size: 4KB