2794f3085f40d83eb360fb9fc94e17ca_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2794f3085f40d83eb360fb9fc94e17ca_JaffaCakes118
Size

76KB
MD5

2794f3085f40d83eb360fb9fc94e17ca
SHA1

77b2c4f8865fbf35b3ec5438c335dcf16f1ffe3c
SHA256

d1d8dcc0dd6bf6322212674f128c192995a6690cf0ec172a009a8d8979a706ef
SHA512

f0d059201dbb9844ff060b5fec60343d013a6c9debf040be72e1cdea56fb2496fdf8f6fbb034c612d7498a8b9b8fd01fde4694ccbaa3cd7854eb36b87548164c
SSDEEP

1536:OEnBfwbch1NZ8A8EoAoM3lFsQ4p5Z9z5Pm:OEnBIbcHn3okPHs9m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2794f3085f40d83eb360fb9fc94e17ca_JaffaCakes118

Files

2794f3085f40d83eb360fb9fc94e17ca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

13444baf3991df2590c700aa3f925e7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\Zckzsdnr\MFjrmxNyF\Phfdgjitiakl.pdb

Imports

user32

IsMenu
GetMenuItemID
SetMenuDefaultItem
GetNextDlgTabItem
RegisterClassExW
GetLastActivePopup
SetWindowTextW
PeekMessageA
SetClassLongW
DestroyAcceleratorTable
GetClassLongW
HiliteMenuItem
GetDlgItemTextA
SendDlgItemMessageA
CreateDialogIndirectParamW
CreatePopupMenu
AttachThreadInput
GetMenuItemCount
IsWindowVisible
SetMenu
FindWindowW
GetMenuStringA
TranslateAcceleratorA
SetDlgItemInt
GetClientRect
GetTopWindow
MessageBoxExW
GetNextDlgGroupItem
SendNotifyMessageW
SendMessageTimeoutW
IsWindow
CreateWindowExA
LoadCursorW
GetSysColorBrush
SetForegroundWindow
SetWindowPos
GetCaretPos
CreateIconIndirect
GetUpdateRect
LookupIconIdFromDirectory
GetFocus
DialogBoxParamW
CheckRadioButton
GetUserObjectInformationA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
wcsncmp
_amsg_exit
calloc
_initterm
_acmdln
exit
gets
_ismbblead
_XcptFilter
_exit
strncmp
_cexit
wcstok
islower
swprintf
setlocale
__setusermatherr
fputc
strerror
printf
__getmainargs
isxdigit

kernel32

GetModuleHandleA
EnumSystemLocalesA
CreateDirectoryW
GetShortPathNameW
DefineDosDeviceW
FindCloseChangeNotification
FreeLibrary
HeapAlloc
GetTempPathW
FindResourceA
QueryDosDeviceW
CreateSemaphoreA
IsDBCSLeadByte
GetTickCount
RemoveDirectoryA
GetModuleFileNameA
AddAtomW
GetAtomNameW
VirtualQuery
TryEnterCriticalSection
SetPriorityClass
FileTimeToDosDateTime

shlwapi

StrToIntExW
StrStrIA

gdi32

SetPixel
LineDDA
CreateICW
SetTextColor
ScaleWindowExtEx
GetBkMode
AddFontResourceW
CreateSolidBrush
CreateBrushIndirect
SetDIBitsToDevice
CreateHatchBrush
CreateRectRgn
CreatePen
FillRgn
SetBrushOrgEx
Rectangle
SetBitmapBits
GetViewportOrgEx

Exports

Exports

?ValidateRectOld@@YGXJG~U
?ShowAppNameEx@@YGKPAIPAI~U
?InsertMainStructDlhSi@@YGKGH@Z
?GlobalAnchorEx@@YGPAHFPAG~U
?LoadKeyNameOriginal@@YGIH~U
?MonitorExW@@YGHK~U
?KillDateTimeOld@@YGX_NJPAI~U
?IsPenOriginal@@YGMDPAIF~U

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.redt
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rimp
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdbg1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rit
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdbg2
Size: 512B - Virtual size: 63B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rvar
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rpt
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ping
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qdocmns
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13444baf3991df2590c700aa3f925e7e

Headers

File Characteristics

PDB Paths

Imports

user32

msvcrt

kernel32

shlwapi

gdi32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.redt Size: 512B - Virtual size: 411B

.rimp Size: 2KB - Virtual size: 2KB

.rdbg1 Size: 512B - Virtual size: 28B

.data Size: 2KB - Virtual size: 1KB

.rit Size: 512B - Virtual size: 500B

.rdbg2 Size: 512B - Virtual size: 63B

.rvar Size: 512B - Virtual size: 44B

.rpt Size: 512B - Virtual size: 316B

.hdata Size: 512B - Virtual size: 268B

.ping Size: - Virtual size: 124KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 2KB - Virtual size: 30KB

qdocmns Size: - Virtual size: 4KB

.text
Size: 21KB - Virtual size: 20KB

.redt
Size: 512B - Virtual size: 411B

.rimp
Size: 2KB - Virtual size: 2KB

.rdbg1
Size: 512B - Virtual size: 28B

.data
Size: 2KB - Virtual size: 1KB

.rit
Size: 512B - Virtual size: 500B

.rdbg2
Size: 512B - Virtual size: 63B

.rvar
Size: 512B - Virtual size: 44B

.rpt
Size: 512B - Virtual size: 316B

.hdata
Size: 512B - Virtual size: 268B

.ping
Size: - Virtual size: 124KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 2KB - Virtual size: 30KB

qdocmns
Size: - Virtual size: 4KB