2c895daa47e7e14a23935dc9977b9491_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2c895daa47e7e14a23935dc9977b9491_JaffaCakes118
Size

171KB
MD5

2c895daa47e7e14a23935dc9977b9491
SHA1

748d0dc60566249d69987301ee1ecd799cc42009
SHA256

d09c5319728bbf63a9d015b51c66cede117c3f7b6c6288afa1ec96e8bcb7c989
SHA512

0dab10fd5616b7096514205c732dc9e3c57f1f1789cc1cde1427f363d844657bcfd3e4115ea39eb95fcd228b9208846eb9391df52b86a14d7f45114d35e3bd31
SSDEEP

3072:AHC7Azgo4qRXDPSsw5c1blU4VwUvFn6CWgpU9DbYKF8g+1t/HuHa/lmM:eMo42XOb5YxN+UNn6VgpEM88l1tvcmlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c895daa47e7e14a23935dc9977b9491_JaffaCakes118

Files

2c895daa47e7e14a23935dc9977b9491_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c3fe91049c87f3015815fd80c815351a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\vtZywaaxpnj\nzqyxvRTzjj\ushvuhRFdqijSh.pdb

Imports

msvcrt

wcsrchr
wcscspn
fseek
_controlfp
wcschr
wcstod
__set_app_type
swscanf
__p__fmode
__p__commode
_amsg_exit
rand
putchar
atol
towupper
_initterm
_ismbblead
_XcptFilter
fgets
bsearch
strstr
fputc
exit
_exit
printf
malloc
swprintf
_cexit
strncmp
isdigit
calloc
toupper
system
iswdigit
time
fwrite
wcscoll
wcscat
iswctype
__setusermatherr
__getmainargs
fflush
isprint
strpbrk

kernel32

VirtualFree
LocalReAlloc
HeapUnlock
GetProcAddress
FormatMessageA
SetThreadPriority
DefineDosDeviceW
GetCommTimeouts
FileTimeToSystemTime
QueryPerformanceCounter
CreateThread
lstrlenW
FindResourceA
IsDBCSLeadByte
FileTimeToLocalFileTime
WaitForSingleObjectEx
GetAtomNameW
SetSystemTime
SetThreadAffinityMask
HeapCreate
CreateDirectoryW
GetNumberFormatW
GetSystemTimeAdjustment
OpenFileMappingW
GetUserDefaultLCID
FlushViewOfFile
lstrcmpA
GetModuleFileNameW
ExitThread
EnumResourceNamesW
TryEnterCriticalSection
GetUserDefaultLangID
RaiseException
SetThreadExecutionState
GetSystemDirectoryA
SetFileAttributesW
CreateEventW
TlsSetValue
GetCommandLineA
WaitCommEvent
SetCommBreak
GlobalAddAtomA
OpenFileMappingA
GetModuleHandleExW
FlushFileBuffers
TlsFree
DeleteFileW
SetCommState
CreateNamedPipeW
GetCommState
GlobalAddAtomW

comdlg32

FindTextW
ChooseFontW
CommDlgExtendedError
ChooseColorW

comctl32

ImageList_GetImageCount
CreateToolbarEx
CreatePropertySheetPageA
ImageList_Create
ImageList_AddMasked
ImageList_Write

user32

wvsprintfW
LoadMenuA
CreateDialogIndirectParamW
LoadStringW
GetScrollInfo
SendDlgItemMessageW
ActivateKeyboardLayout
ShowCursor
MessageBoxA
CreateIconFromResource
ShowCaret
SendNotifyMessageW
GetMenuItemRect
CharToOemA
CheckMenuItem
TranslateAcceleratorA
RegisterClassA
SetDlgItemInt
InvertRect
ShowScrollBar
CharToOemBuffA
OffsetRect
GetWindowLongW
FillRect
PostThreadMessageA
LoadCursorA
OemToCharA
MonitorFromRect
BringWindowToTop
ChangeMenuW
GetSubMenu
LoadIconW
CreateMenu
IsIconic
SetCursor
EndPaint
CallWindowProcW
IsRectEmpty
IsCharAlphaNumericW
MessageBoxW
SystemParametersInfoA
RegisterWindowMessageW
CheckDlgButton
GetMenuItemInfoW
SystemParametersInfoW
DrawIconEx
GetWindow
GetUserObjectInformationW
DeleteMenu
DialogBoxIndirectParamW
InternalGetWindowText
IsWindow
SetForegroundWindow
PeekMessageA
SetSysColors
InsertMenuA
GetMenuItemID
KillTimer
CharToOemW
ClientToScreen
MonitorFromPoint
SetWindowRgn
LoadMenuW
GetSystemMetrics
IsWindowVisible
DestroyWindow
CreateDialogParamW
DrawIcon
AppendMenuW
CascadeWindows
GetClassInfoA
PostMessageA
LookupIconIdFromDirectory
FindWindowExW
GetWindowRect
GetWindowDC
UnionRect
RegisterClassW
LoadAcceleratorsA
FindWindowExA
CreateCaret
DestroyIcon
DrawStateA
mouse_event
CopyRect
OpenIcon
SetPropW
GetKeyboardLayout
LoadImageW
LoadIconA
GetScrollRange
SendMessageW
SetRectEmpty
IsDialogMessageA
GetNextDlgTabItem
FindWindowW
IsChild
EnableScrollBar
MapDialogRect
DefFrameProcW
PostMessageW
SetDlgItemTextA
PostQuitMessage
IsWindowUnicode
ClipCursor
GetMessageTime
EnumChildWindows
MessageBoxExW
RemoveMenu

gdi32

PtVisible
GetTextColor
UnrealizeObject
CreateDCW
TranslateCharsetInfo
CreatePenIndirect
StretchBlt
PolyBezier
CreateRectRgnIndirect
SetDIBColorTable
SelectObject
CreateHalftonePalette
SetPaletteEntries
GetTextMetricsA
EndDoc
RectVisible
CreateFontIndirectA
CreateBitmap
CreateDIBitmap
RealizePalette
TextOutA
GetROP2
GetPixelFormat
TextOutW
EnumFontFamiliesW
SelectClipRgn
ScaleViewportExtEx
SetDIBits
GetTextFaceW
GetStockObject
MoveToEx
GetCharWidth32W
ExtFloodFill
CreateICW
IntersectClipRect
GetTextCharsetInfo
CreateFontA
LPtoDP
CreateRoundRectRgn
GetRgnBox
GetCurrentObject
CreateBrushIndirect
SetBkColor
GetObjectA
BeginPath

Exports

Exports

?FindSizeOld@@YGMPADJPAEF<V

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3fe91049c87f3015815fd80c815351a

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

comdlg32

comctl32

user32

gdi32

Exports

Exports

Sections

.text Size: 146KB - Virtual size: 145KB

.data Size: 22KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 146KB - Virtual size: 145KB

.data
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB