2b736b718660840d0a45453d2e7cb361_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b736b718660840d0a45453d2e7cb361_JaffaCakes118
Size

167KB
MD5

2b736b718660840d0a45453d2e7cb361
SHA1

12936e9f0f37230cce53ff92c350430cae5ccbfd
SHA256

7789afe184c5a0f7605ef46b8ec250839a03ae53238bd0d9cca61a430f4ddb76
SHA512

a9b49b42b916bbde68f80686dc781d6c91d7ac8cad58f4305e40a0dacb4f97aac9e2fbecf74d094f16866937f493bb2f750976b47392b1022ad32676976018cf
SSDEEP

3072:XZW+6d+dCZ6z1euW+W78O1Hfwkjfd8jwST6Gh33gwdS0RxbcGvK+NrkfpJj:XZW+U+dJLI8OFtjfdRMrS0RlzTCpJj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b736b718660840d0a45453d2e7cb361_JaffaCakes118

Files

2b736b718660840d0a45453d2e7cb361_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7f9f85452afefe094de9093e0a10e131

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\zsoFneutdgyze\nulHTimmMJhz\pPNqOAxbquhvk.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_Remove
CreateToolbarEx
ImageList_GetIcon
CreateStatusWindowW
DestroyPropertySheetPage

user32

VkKeyScanW
SetParent
GetDlgItem
LoadIconA
ShowCursor
RegisterClassW
DestroyCaret
MonitorFromRect
IsWindow
IsZoomed
CharUpperBuffA
SetFocus
IsDialogMessageW
FindWindowExA
MoveWindow
TileWindows
DrawIcon
DestroyMenu
GetIconInfo
EqualRect
GetDlgItemInt
wvsprintfA
GetParent
PtInRect
SetSysColors
GetClassInfoA
RegisterHotKey
GetScrollRange
LoadAcceleratorsW
GetScrollInfo
CharNextA
GetDlgItemTextA
IsIconic
ShowCaret
SetDlgItemInt
InsertMenuA
CreateWindowExW
MessageBoxExW
SendMessageW
ShowOwnedPopups
CopyRect
DestroyAcceleratorTable
GetSystemMenu
GetWindowTextLengthW
OpenInputDesktop
ModifyMenuW
TrackPopupMenu
BringWindowToTop
RegisterClassExW
SetWindowLongW
DefDlgProcA
CheckDlgButton
LoadBitmapW
MapDialogRect
LoadAcceleratorsA
GetLastActivePopup
SetWindowTextW
SetCaretPos
PostMessageA
LoadStringA
CreateDialogIndirectParamW
DrawIconEx
DrawTextW
IsWindowUnicode
wvsprintfW
SetPropW
TranslateAcceleratorA
GetUpdateRect
HideCaret
PeekMessageW
CreateIconFromResource
SendNotifyMessageW
DefDlgProcW
RegisterClassA
InternalGetWindowText
PeekMessageA
GetSysColor
GetKeyboardLayoutNameW
GetWindowRect
TranslateMessage
GetWindow
DestroyCursor
GetTopWindow
GetMenuItemID
GetForegroundWindow
GetMenuStringA
CreateDialogParamA
OpenIcon
FindWindowExW
MessageBoxA
ClipCursor
DialogBoxParamW
GetNextDlgTabItem
DrawFocusRect
InvalidateRect
KillTimer
GetMenuState
SetCursorPos
SetUserObjectInformationW
DrawAnimatedRects
LoadImageW
DialogBoxIndirectParamA
OemToCharA
EnumChildWindows
GetCursorPos
RemoveMenu
MonitorFromPoint

kernel32

ResetEvent
CreateMailslotW
GetNumberFormatW
FindFirstFileW
CreatePipe
GetWindowsDirectoryW
IsValidLanguageGroup
FindResourceW
IsBadCodePtr
AreFileApisANSI
SetTimerQueueTimer
GetCPInfo
SetNamedPipeHandleState
WaitForMultipleObjectsEx
SleepEx
RemoveDirectoryW
GetSystemDirectoryA
FindFirstFileA
SetThreadContext
GetFileSize
CompareFileTime
FlushFileBuffers
lstrcpynW
HeapUnlock
ReleaseMutex
LoadLibraryW
CancelWaitableTimer
DeleteFileW
CreateMutexW
GetThreadLocale
GetTimeFormatA
lstrlenA
LocalSize
FindResourceExA
FindFirstChangeNotificationW
GetCommModemStatus
GetModuleHandleExW
OpenFileMappingA
SetFilePointer
GetTimeFormatW
GetCommConfig
IsBadWritePtr
FindResourceA
SetCommState
GetThreadPriority
DeleteFileA
SetUnhandledExceptionFilter
GetAtomNameW
lstrcatW
GetUserDefaultLCID

msvcrt

_controlfp
iswspace
gets
isprint
__set_app_type
__p__fmode
wcsstr
strtok
strcoll
__p__commode
_amsg_exit
_initterm
fwrite
_ismbblead
free
printf
islower
iswxdigit
fputc
_XcptFilter
sprintf
tolower
_exit
system
_cexit
wcstol
rand
__setusermatherr
wcscspn
strtoul
wcspbrk
clock
ftell
isalnum
strchr
strtol
iswdigit
strerror
mbtowc
time
__getmainargs
wcscpy
isalpha
vsprintf

gdi32

CreateBitmap
RemoveFontResourceW
GetDIBColorTable
GetPixel
RectInRegion
GetCurrentObject
GetTextExtentPointA
CreateRectRgn
PatBlt
GetTextMetricsW
DPtoLP
CreateFontIndirectW
SetBkMode
EndDoc
FillRgn
SetWindowOrgEx
RestoreDC
CreateHatchBrush
SetAbortProc
GetMapMode
SetStretchBltMode
GetRgnBox
CreatePolygonRgn
SaveDC
CreateFontW
EndPage
SetDIBits
AddFontResourceW
LPtoDP
CreateBrushIndirect
GetLayout
GetTextAlign
GetTextMetricsA
RectVisible
SetTextColor
GetDIBits
StartPage
CreateDIBSection
EndPath
CreateBitmapIndirect
GetTextExtentPoint32W
Rectangle
PathToRegion
GetObjectW

Exports

Exports

?AppNameExW@@YGPAGPAMPAFPAMI<V

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f9f85452afefe094de9093e0a10e131

Headers

File Characteristics

PDB Paths

Imports

comctl32

user32

kernel32

msvcrt

gdi32

Exports

Exports

Sections

.text Size: 143KB - Virtual size: 143KB

.data Size: 22KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 143KB - Virtual size: 143KB

.data
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB