32b37d8e3e4da381e6e7be847330fe2a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

32b37d8e3e4da381e6e7be847330fe2a_JaffaCakes118
Size

139KB
MD5

32b37d8e3e4da381e6e7be847330fe2a
SHA1

10b0ab5a132f13ba959b69c2905229cd3ba4c3bc
SHA256

2583b5080441def9c5e19ba8f9255da5b946b011e7206bb32a0e25a20e360254
SHA512

3da6d55b30e337b186750e72ab76acf11948c608fabb446067c43aae3019fa7d35ce7ed7a2461a7011d9a130eafef77043fe365f5afee7bbc8f8fa0bd58c5598
SSDEEP

3072:gRwKpJjei5a8hzyo5XjGVPyK3Hs13QhvCyh:lchz5nzn5XjeZHs3T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32b37d8e3e4da381e6e7be847330fe2a_JaffaCakes118

Files

32b37d8e3e4da381e6e7be847330fe2a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b4ec1bd594eab88362649e6d3543518c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\mmDHygvafxxI\umhDvLxgc\CessvPpZa\csLcYEaqvb\nYPWmxhRlrmhIi.pdb

Imports

user32

ShowOwnedPopups
AllowSetForegroundWindow
InSendMessageEx
SetDlgItemInt
CharLowerA
GetDlgItemTextA
GetMessageTime
GetMessageA
InvalidateRect
MapVirtualKeyW
DrawFocusRect
GetForegroundWindow
CharNextA
SetLastErrorEx
GetDlgCtrlID
UpdateWindow
GetDlgItemInt
IsCharAlphaA
DestroyCursor
FindWindowExA
GetKeyNameTextW
CreateIconIndirect
GetMenuItemInfoW
CallWindowProcW
DestroyCaret
LoadCursorA
DefWindowProcA
ReplyMessage
CreateCaret
GetTopWindow
CreateDialogIndirectParamW
WaitForInputIdle
ChangeMenuW
AdjustWindowRectEx
InSendMessage
CharUpperBuffW
LoadIconW
WaitMessage
SendMessageW
GetWindowLongA
GetLastActivePopup
ShowScrollBar
SetWindowPlacement
IsChild
SwitchToThisWindow
PostThreadMessageW
IsCharLowerA
GetWindowRect
GetClassLongW
UnionRect
GetMessageW
InflateRect
EnumChildWindows
GetKeyboardLayout
LoadStringW
GetUpdateRect
AttachThreadInput
CloseDesktop
GetDCEx
CharToOemW
MapWindowPoints
CheckRadioButton
SetCursorPos
MessageBoxExW
SetMenuItemBitmaps
GetClassInfoExW
BeginDeferWindowPos
OemToCharBuffA
SendMessageTimeoutW
MapVirtualKeyA
EnumThreadWindows
IsMenu
TranslateMessage
EnableScrollBar
SetFocus
IsWindowVisible
DispatchMessageA
wvsprintfA
ScrollWindowEx
SetWindowTextW
TranslateAcceleratorA
SetClassLongW
GetDoubleClickTime
CharPrevW
DrawTextW
DefDlgProcA
RemovePropW
SetWindowRgn
GetNextDlgTabItem
LoadStringA
DialogBoxParamA
SetMenuDefaultItem
SetMenuItemInfoW
GetUserObjectInformationA
CascadeWindows
SetCursor
CharNextExA
CallWindowProcA
HiliteMenuItem
IsWindowEnabled
RegisterClassA
LoadMenuW
CharUpperW
AppendMenuA
ClientToScreen
GetMenuItemID
GetShellWindow
FrameRect
SetCaretPos
IsDlgButtonChecked
CreateCursor
GetWindowTextW
DrawIcon
wsprintfA
BeginPaint
OpenDesktopW
CharPrevA
ShowWindow
OffsetRect
FindWindowA

kernel32

EnterCriticalSection
GetCurrentThreadId
LocalSize
FindFirstChangeNotificationW
GetModuleHandleA
LocalLock
LockResource
GlobalCompact
GetModuleFileNameA
SetFileAttributesW
CreateNamedPipeA
GetWindowsDirectoryW
CopyFileA
WaitForSingleObject
GetFileTime
OpenSemaphoreW
RegisterWaitForSingleObject
lstrcpyW
GetFullPathNameW
CreateFileMappingW
GetCommandLineA
lstrcmpiA
LoadResource
WaitForMultipleObjects
CompareFileTime
LCMapStringW
ReleaseMutex
CompareStringW
GetCommModemStatus
FindNextChangeNotification
PulseEvent
GetSystemDirectoryA
FindFirstFileA
GetTempPathA
GlobalLock
SuspendThread
SetCommTimeouts
OpenFileMappingA
SetFileTime
FormatMessageW
HeapSize
SystemTimeToFileTime
lstrlenW
SetErrorMode
LeaveCriticalSection
GlobalAddAtomA
GetSystemWindowsDirectoryA
LCMapStringA
WriteFile
DuplicateHandle
GetShortPathNameW
ReadFile
TransactNamedPipe
SearchPathW
TerminateThread
GetTickCount
MoveFileExW
UnlockFile

comctl32

CreatePropertySheetPageW
ImageList_LoadImageW
CreatePropertySheetPageA
CreateToolbarEx
ImageList_Write
ImageList_Destroy

msvcrt

ftell
isprint
_controlfp
fgets
srand
__set_app_type
fprintf
towlower
fflush
wcstod
__p__fmode
fputc
__p__commode
atol
qsort
_amsg_exit
wcslen
toupper
putchar
_initterm
sprintf
wcscat
fclose
time
_ismbblead
_XcptFilter
floor
setvbuf
printf
wcstok
clearerr
wcscspn
_exit
isalnum
fgetc
_cexit
strtok
iswprint
__setusermatherr
puts
strcpy
wcscoll
fread
vswprintf
strstr
isupper
__getmainargs

Exports

Exports

?RegenerateMainValues@@YGKPBDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.e_tab
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.redit
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_tab
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.site
Size: 512B - Virtual size: 475B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4ec1bd594eab88362649e6d3543518c

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comctl32

msvcrt

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.e_tab Size: 512B - Virtual size: 125B

.redit Size: 1KB - Virtual size: 128KB

.data Size: 2KB - Virtual size: 1KB

.i_tab Size: 6KB - Virtual size: 5KB

.site Size: 512B - Virtual size: 475B

.wdata Size: 1024B - Virtual size: 704B

.rsrc Size: 105KB - Virtual size: 104KB

.text
Size: 22KB - Virtual size: 21KB

.e_tab
Size: 512B - Virtual size: 125B

.redit
Size: 1KB - Virtual size: 128KB

.data
Size: 2KB - Virtual size: 1KB

.i_tab
Size: 6KB - Virtual size: 5KB

.site
Size: 512B - Virtual size: 475B

.wdata
Size: 1024B - Virtual size: 704B

.rsrc
Size: 105KB - Virtual size: 104KB