28227e76e975cf0a301902151d7ef0aa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

28227e76e975cf0a301902151d7ef0aa_JaffaCakes118
Size

146KB
MD5

28227e76e975cf0a301902151d7ef0aa
SHA1

271adab6705250dbeeecd2dfc1037f47dfea80c0
SHA256

1a8e562cb7315b735153528b7fd0970ecf7331ccddcf489abffab3d76cd85140
SHA512

455a8d9f0fea8faab9eb98ef34da6f7ac38674461839637fd7f9504d12194d77c891f8a4c97df0e0d35e9cab91ead0f731ceb33acb729deb9ae12038f0839e0c
SSDEEP

3072:NzrQZV067hKC/sEJMMF76aZevm2RM1gLQkymX65vJfzV3jrIuttecA:N/80MbES5F7uvm2m1gLQkf613jrIGYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28227e76e975cf0a301902151d7ef0aa_JaffaCakes118

Files

28227e76e975cf0a301902151d7ef0aa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ecb1d5427d5dc9ab8b5e36039d4f0549

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\tszfXfo\jRhjoklgtTvol\bzhRJwhbKpcMf\efdEmajvyna.pdb

Imports

msvcrt

_controlfp
fflush
fputs
wcsncpy
wcscspn
iswprint
fputc
__set_app_type
memset
wcstod
gmtime
__p__fmode
strpbrk
wcstol
isxdigit
fread
__p__commode
towlower
strncmp
setlocale
_amsg_exit
_initterm
_ismbblead
localtime
wcsncmp
isupper
iswalpha
putchar
mktime
strstr
_XcptFilter
wcspbrk
atoi
fprintf
fgets
isalpha
puts
strcpy
iswspace
_exit
_cexit
__setusermatherr
__getmainargs
iswdigit
wcscat
sscanf
sprintf
printf

user32

DrawTextA
TrackPopupMenu
ValidateRect
MessageBoxExW
GetKeyboardType
SetLastErrorEx
GetIconInfo
ShowCaret
GetScrollPos
DialogBoxIndirectParamA
GetClipCursor
SetMenu
IsDialogMessageA
CharUpperBuffW
GetFocus
DestroyWindow
CharNextA
GetAsyncKeyState
LoadImageA
InvalidateRect
KillTimer
TabbedTextOutW
CharUpperA
MoveWindow
InflateRect
DialogBoxIndirectParamW
CharLowerBuffW
DrawAnimatedRects
CreateIconFromResource
GetDoubleClickTime
InternalGetWindowText
GetUserObjectInformationW
GetWindowLongA
IsCharAlphaNumericW
BringWindowToTop
GetWindowTextLengthW
OemToCharBuffA
SwitchToThisWindow
GetActiveWindow
OpenIcon
CheckDlgButton
LoadMenuA
CheckRadioButton
mouse_event
SetScrollInfo
CreateWindowExW
GetWindowModuleFileNameW
GetKeyState
SetDlgItemInt
SetWindowLongA
GetMenuStringA
GetClassNameW
TranslateAcceleratorW
GetWindowRect
InsertMenuA
IsMenu
GetDlgItemTextW
HiliteMenuItem
DrawStateA
GetPropW
TrackPopupMenuEx
LoadStringW
GetMessageA
GetDlgItemInt
MapVirtualKeyW
PostMessageA
DrawMenuBar
RegisterWindowMessageW
SetForegroundWindow
GetDialogBaseUnits
ChildWindowFromPointEx
GetWindowTextW
FindWindowExA
CharNextExA
wsprintfW
SetFocus
CreateIconIndirect
EnableWindow
DialogBoxParamA
RemovePropW
SendMessageA
ReplyMessage
ShowScrollBar
UpdateWindow
GetGUIThreadInfo
TranslateMessage
SendMessageW
LoadCursorA
OpenInputDesktop
GetMessageTime
PostThreadMessageW
GetSysColorBrush
CopyImage
GetSystemMenu
RegisterClassExW
SendDlgItemMessageA
DestroyAcceleratorTable
SetWindowTextW
GrayStringW
RegisterWindowMessageA
SetClassLongW
SendDlgItemMessageW
LockWindowUpdate
CloseDesktop
GetShellWindow
GetCaretBlinkTime
CopyAcceleratorTableW
UnloadKeyboardLayout
GetScrollRange
VkKeyScanW
GetMenuState
CreateAcceleratorTableW
GetParent
SetPropW
GetWindow
FindWindowW
EnableMenuItem
DestroyIcon
GetDlgCtrlID
CopyRect
AppendMenuA
GetTopWindow
DrawTextExW
AdjustWindowRectEx
CharNextW
CallWindowProcW

shlwapi

StrToIntW

kernel32

TlsFree
IsBadStringPtrW
MapViewOfFile
HeapUnlock
GetFileAttributesW
IsBadWritePtr
SetMailslotInfo
GetDateFormatW
lstrcpynW
GetVersionExW
GetModuleHandleA
GlobalAddAtomW
CreateNamedPipeA
GetOverlappedResult
FreeLibrary
SetThreadPriority
TransactNamedPipe
GetSystemWindowsDirectoryA
GetModuleFileNameW
WaitForSingleObject
CopyFileA
CreateNamedPipeW
HeapFree
IsDBCSLeadByte
GetFullPathNameW
SetFilePointer
GlobalUnlock
WaitForSingleObjectEx
GetLocaleInfoA
ClearCommError
SetEvent
SetFileTime
GetModuleHandleW
GetProcessHeap
HeapAlloc
WaitForMultipleObjects
GetComputerNameExW
SetCommBreak
GetVersion
GetSystemDirectoryA
SetUnhandledExceptionFilter
SystemTimeToFileTime
IsBadCodePtr
TerminateThread
FindNextFileA
EnumResourceTypesA
VerSetConditionMask
OpenFileMappingW
GlobalLock
OpenFileMappingA
LocalAlloc
GetCurrentThreadId
IsValidLocale
GetOEMCP
GetSystemWindowsDirectoryW
EnumResourceLanguagesA
CreateWaitableTimerA
GetCommandLineA

comdlg32

PrintDlgExW
ReplaceTextW
GetFileTitleW
GetOpenFileNameA
FindTextW

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecb1d5427d5dc9ab8b5e36039d4f0549

Headers

File Characteristics

PDB Paths

Imports

msvcrt

user32

shlwapi

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 66KB

.data Size: 15KB - Virtual size: 81KB

.rsrc Size: 61KB - Virtual size: 60KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 66KB

.data
Size: 15KB - Virtual size: 81KB

.rsrc
Size: 61KB - Virtual size: 60KB

.reloc
Size: 2KB - Virtual size: 1KB