3138af0291461e484980d2dbe7933e6b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3138af0291461e484980d2dbe7933e6b_JaffaCakes118
Size

151KB
MD5

3138af0291461e484980d2dbe7933e6b
SHA1

69eacb4eba55bdfb5715941dc708c3dfd866587b
SHA256

ca8ec7098a73f4d54ddd1a209e85bdd0ab40c1c51c6d778da98b4c9330d011cb
SHA512

9285ca5fc9f089a8d1fd20e2adcf0089337e6f22f06cd80eb73b511bab3fa56eba1747e2f0afe3a1d20453cb60fe3d44efa07c2994f4de2bddd98e267c5514f7
SSDEEP

3072:lYlsZt2RMCgVLG/MJNcaIAy/flPz1W6BXWnW6aL3L+lGuNQgy4vT:z2mY/MJN5y/fZ1W6lWnWTCVQbyT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3138af0291461e484980d2dbe7933e6b_JaffaCakes118

Files

3138af0291461e484980d2dbe7933e6b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

19955b3e3bc7d9432eb61fa2baec26cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\ivsWyGostmK\hVhjticFre\oebIwoXop\jgVplcmLMp.pdb

Imports

shlwapi

StrToIntA

user32

OpenDesktopW
GetNextDlgTabItem
FindWindowA
PostMessageA
InternalGetWindowText
DrawFrameControl
UnionRect
GetClassLongW
MapVirtualKeyA
EndPaint
DialogBoxIndirectParamW
IsCharAlphaW
DialogBoxIndirectParamA
LookupIconIdFromDirectory
MonitorFromRect
LoadImageA
ModifyMenuW
AllowSetForegroundWindow
RemovePropW
DestroyAcceleratorTable
GetCaretPos
DefFrameProcA
PeekMessageA
FindWindowW
EnumThreadWindows
InsertMenuA
GetMenuStringA
GetWindow
LoadAcceleratorsW
LoadBitmapW
SendInput
SetMenuDefaultItem
SendMessageTimeoutA
GetUserObjectInformationA
WaitMessage
RemoveMenu
CopyRect
DefWindowProcA
LoadIconA
GetDC
GetMenuItemCount
SetForegroundWindow
GetParent
CreateWindowExW
IsWindow
CallWindowProcW
SetPropW
DeleteMenu
SetCaretPos
RegisterWindowMessageA
DefFrameProcW
SetRect
SetWindowPos
ScrollWindowEx
ScreenToClient
CreateDialogParamW
EnableMenuItem
GetClassInfoW
SetMenuItemBitmaps
SetDlgItemInt
DrawTextW
IsIconic
MapWindowPoints
CharUpperBuffW
OpenInputDesktop
GetDlgCtrlID
GetScrollRange
CreateDialogIndirectParamW
DefDlgProcA
LoadBitmapA
DestroyIcon
GetAltTabInfoA
DrawTextExW
GetCaretBlinkTime
WaitForInputIdle
LockWindowUpdate
SetRectEmpty
GetMessageExtraInfo
CharPrevW
DestroyCaret
ShowWindow
CloseDesktop
ChangeMenuW
GetSysColorBrush
GetSysColor
VkKeyScanW
SetSysColors
InvertRect
wvsprintfW
ActivateKeyboardLayout
ExitWindowsEx
HideCaret
GetClassInfoExA
EndDialog
DragObject
MapVirtualKeyExW
SetTimer
IsDialogMessageA
GetMessageA
CascadeWindows
InSendMessageEx
EnableScrollBar
GetClientRect
CharLowerW
InsertMenuW
GetClassLongA
PostThreadMessageA
GetScrollInfo
EnableWindow
TranslateAcceleratorA
IsWindowEnabled
InvalidateRgn
LoadImageW
BringWindowToTop
LoadIconW
TrackPopupMenu
GetTopWindow
IsRectEmpty
GetAsyncKeyState
AdjustWindowRect
SetParent
SetScrollPos

comdlg32

PrintDlgExW
GetFileTitleW
ChooseColorW
PrintDlgW
FindTextW
ReplaceTextW

kernel32

ClearCommBreak
DeleteFileW
GetFileAttributesW
TlsGetValue
FreeResource
LocalLock
HeapAlloc
VirtualProtect
EnumSystemLocalesA
VirtualQuery
CreateFileW
SetupComm
GetShortPathNameA
GetModuleFileNameW
ReleaseMutex
GetModuleFileNameA
CreateMutexA
GetFileSize
MoveFileExW
AddAtomA
CallNamedPipeW
SetThreadPriority
GetCommProperties
lstrcpynA
SetThreadLocale
FileTimeToSystemTime
IsValidLocale
GetCommModemStatus
OpenSemaphoreW
GlobalFindAtomW
EscapeCommFunction
DeviceIoControl
GetModuleHandleA
LoadLibraryExA
UnhandledExceptionFilter
FindResourceExW
GetCommState
LockFile
HeapFree
LockResource
GetFileType
LeaveCriticalSection
FileTimeToLocalFileTime
PulseEvent
GetModuleHandleW
GetProcessHeap
DeleteFileA
HeapUnlock
GetHandleInformation
AddAtomW
GetSystemWindowsDirectoryW
GetAtomNameW
CompareFileTime
QueryDosDeviceW
lstrcpynW
SetCommState
MoveFileW
IsValidLanguageGroup
SearchPathA

msvcrt

strstr
strcspn
puts
atoi
isalpha
strtoul
localtime
free
_controlfp
setvbuf
__set_app_type
towlower
isspace
__p__fmode
clearerr
toupper
__p__commode
strncmp
strerror
floor
mktime
_amsg_exit
wcscmp
sscanf
vswprintf
_initterm
wcspbrk
strrchr
_ismbblead
fwrite
_XcptFilter
memset
fgets
strncpy
malloc
_exit
strspn
fflush
ftell
_cexit
fputc
__setusermatherr
strcpy
vsprintf
__getmainargs
fputs
iswspace
towupper

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19955b3e3bc7d9432eb61fa2baec26cc

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

comdlg32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 116KB

.rsrc Size: 123KB - Virtual size: 122KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 116KB

.rsrc
Size: 123KB - Virtual size: 122KB

.reloc
Size: 2KB - Virtual size: 1KB