24daa56b50fdeb6ab9e392078aba9450_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

24daa56b50fdeb6ab9e392078aba9450_JaffaCakes118
Size

146KB
MD5

24daa56b50fdeb6ab9e392078aba9450
SHA1

61f78d0c777a146351f85c5fb4c349d376f5863b
SHA256

82940c44756159a0c27f3875ccdb0371b7432f04357324736af1a5cc12769084
SHA512

c25b75356a7e8135982f37a63e36d4fcf6890ee27007b63604fd6cd56ef671098e51f9c4f593633ad3115687090f6b86e8b7a709723226b536dfe97459534a0b
SSDEEP

3072:rOQhmdpA9DtHcqk6ONBAlVVnl3khn7YL0dg0iuxL:/mdRpv1Y2hL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24daa56b50fdeb6ab9e392078aba9450_JaffaCakes118

Files

24daa56b50fdeb6ab9e392078aba9450_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6928af667c74e248efc3ea66e3190e1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\rhuJhubiA\VAfQbgjUsxd\cLlubruorY.pdb

Imports

user32

DeleteMenu
SendMessageTimeoutW
IsWindowUnicode
GetWindowPlacement
CheckRadioButton
GetUserObjectInformationA
SetScrollInfo
MessageBoxW
LoadCursorA
DefFrameProcA
GetKeyboardLayoutNameW
AttachThreadInput
AppendMenuW
ClipCursor
GetMenuStringW
LoadIconA
DefWindowProcW
CharNextA
RedrawWindow
SendNotifyMessageW
GetUserObjectInformationW
HiliteMenuItem
AllowSetForegroundWindow
GetMenuStringA
ArrangeIconicWindows
FindWindowExA
DrawTextA
BeginPaint
SetWindowPos
RegisterClassW
GetLastActivePopup
SetWindowLongA
EnableScrollBar
DefFrameProcW
CreateIconFromResource
LoadStringW
GetCaretPos
RegisterWindowMessageA
WaitForInputIdle
IsWindow
GetSysColorBrush
IsMenu
ShowWindowAsync
GetDialogBaseUnits
PostThreadMessageW
GetMenuItemInfoW
DefDlgProcA
SetDlgItemInt
CopyAcceleratorTableW
GetWindowLongW
InvalidateRect
MapWindowPoints
WaitMessage
CharNextW
GetClipCursor
GetMessagePos
keybd_event
ShowScrollBar
CloseDesktop
SetCursorPos
IsCharUpperA
CascadeWindows
SetScrollRange
LoadBitmapW
DrawTextExW
CreateIconIndirect
ClientToScreen
CharToOemBuffA
LockWindowUpdate
SystemParametersInfoA
LoadAcceleratorsW
LoadImageW
CopyRect
FindWindowExW
wvsprintfW
DrawStateW
ChangeMenuW
OemToCharBuffA
ScrollWindow
TabbedTextOutW
CheckDlgButton
OpenDesktopW
BringWindowToTop
SetRect
GetScrollRange
CreateMenu
UpdateWindow
ReplyMessage
UnloadKeyboardLayout
SendMessageW
IsDialogMessageA
GetTopWindow
GetDlgItemInt
InflateRect
SetParent
IsDialogMessageW
DefWindowProcA
DispatchMessageW
PostThreadMessageA
GetKeyNameTextW
DrawEdge
ValidateRect
FillRect
SetCaretPos
InsertMenuA
ToUnicodeEx
CreateWindowExW
FindWindowA
MapVirtualKeyA
CharToOemW
GetScrollInfo
EnableWindow
GetMenuItemCount
DeferWindowPos
SetScrollPos
DrawFrameControl
ChildWindowFromPoint
SetUserObjectInformationW

msvcrt

isspace
wcsrchr
_controlfp
swscanf
mktime
tolower
__set_app_type
fgets
ungetc
wcschr
__p__fmode
__p__commode
malloc
wcsstr
strtok
wcsncmp
iswxdigit
isupper
_amsg_exit
wcscspn
fflush
perror
wcslen
_initterm
wcstod
_ismbblead
_XcptFilter
setvbuf
memset
wcstok
putchar
time
_exit
_cexit
gmtime
strtol
strpbrk
strstr
free
__setusermatherr
__getmainargs
mbstowcs
toupper
clock
remove
strcspn
fseek
atoi
setlocale

comctl32

ImageList_Draw
ImageList_AddMasked
CreateToolbarEx
PropertySheetW
ImageList_ReplaceIcon
ImageList_LoadImageW

kernel32

LoadLibraryA
GetCommProperties
SearchPathA
HeapUnlock
GetACP
SearchPathW
GetStdHandle
FoldStringW
LeaveCriticalSection
GetFileType
ReleaseMutex
LCMapStringW
HeapFree
GetLocaleInfoW
GetCurrentDirectoryW
CreateFileMappingA
SetCommMask
GlobalSize
MoveFileW
GlobalAddAtomW
GetSystemDefaultUILanguage
GetFileAttributesW
TerminateThread
SetTimerQueueTimer
SetCommBreak
FileTimeToDosDateTime
CopyFileA
CopyFileW
GetTimeFormatA
GetComputerNameExA
TlsSetValue
LockFile
ClearCommError
CreatePipe
CancelIo
SetLocalTime
GetStartupInfoA
CreateEventW
lstrlenW
GetStartupInfoW
GetCommConfig
HeapReAlloc
GetVersionExW
EnumResourceTypesA
VerSetConditionMask
WinExec
DefineDosDeviceW
GetSystemWindowsDirectoryA
GetDateFormatW
LocalFree
GetThreadContext
GetOverlappedResult

comdlg32

GetOpenFileNameW
CommDlgExtendedError
FindTextW
ChooseFontW

Exports

Exports

?ReadInfoFile@@YGK_KHE:O

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erts
Size: 512B - Virtual size: 83B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.info
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6928af667c74e248efc3ea66e3190e1a

Headers

File Characteristics

PDB Paths

Imports

user32

msvcrt

comctl32

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 21KB

.init Size: 6KB - Virtual size: 5KB

.erts Size: 512B - Virtual size: 83B

.wall Size: 512B - Virtual size: 124KB

.info Size: 1024B - Virtual size: 704B

.data Size: 3KB - Virtual size: 2KB

.udata Size: 31KB - Virtual size: 31KB

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 21KB

.init
Size: 6KB - Virtual size: 5KB

.erts
Size: 512B - Virtual size: 83B

.wall
Size: 512B - Virtual size: 124KB

.info
Size: 1024B - Virtual size: 704B

.data
Size: 3KB - Virtual size: 2KB

.udata
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 2KB - Virtual size: 1KB