33b2f4139477d3aa0f438b175153e81c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

33b2f4139477d3aa0f438b175153e81c_JaffaCakes118
Size

169KB
MD5

33b2f4139477d3aa0f438b175153e81c
SHA1

b4a01ccad7d575b399d0a23770d99083e4fd5d1d
SHA256

ddd0422b464ac9a11c87e731426f421c934445386fcc534a90fd3d8707b76f7f
SHA512

eb5b5f7add80e330e98c660e3df1eeb117960317a3247a5e02e15cfece5a9f3b131108d485c77717b794fd8aaa83d0e3dac3107867f410c878c3c1412389ed2a
SSDEEP

3072:CtnhkiOgiAO2DGsLzp5bDEhylMLn1P4Z++Avu+9bPAcGyK3NLkf3JWc:mnhkVglXDGsLzp5vEhylun1oAdkzzC3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33b2f4139477d3aa0f438b175153e81c_JaffaCakes118

Files

33b2f4139477d3aa0f438b175153e81c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

7f9f85452afefe094de9093e0a10e131

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

P:\zsoFneutdgyze\nulHTimmMJhz\pPNqOAxbquhvk.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_Remove
CreateToolbarEx
ImageList_GetIcon
CreateStatusWindowW
DestroyPropertySheetPage

user32

VkKeyScanW
SetParent
GetDlgItem
LoadIconA
ShowCursor
RegisterClassW
DestroyCaret
MonitorFromRect
IsWindow
IsZoomed
CharUpperBuffA
SetFocus
IsDialogMessageW
FindWindowExA
MoveWindow
TileWindows
DrawIcon
DestroyMenu
GetIconInfo
EqualRect
GetDlgItemInt
wvsprintfA
GetParent
PtInRect
SetSysColors
GetClassInfoA
RegisterHotKey
GetScrollRange
LoadAcceleratorsW
GetScrollInfo
CharNextA
GetDlgItemTextA
IsIconic
ShowCaret
SetDlgItemInt
InsertMenuA
CreateWindowExW
MessageBoxExW
SendMessageW
ShowOwnedPopups
CopyRect
DestroyAcceleratorTable
GetSystemMenu
GetWindowTextLengthW
OpenInputDesktop
ModifyMenuW
TrackPopupMenu
BringWindowToTop
RegisterClassExW
SetWindowLongW
DefDlgProcA
CheckDlgButton
LoadBitmapW
MapDialogRect
LoadAcceleratorsA
GetLastActivePopup
SetWindowTextW
SetCaretPos
PostMessageA
LoadStringA
CreateDialogIndirectParamW
DrawIconEx
DrawTextW
IsWindowUnicode
wvsprintfW
SetPropW
TranslateAcceleratorA
GetUpdateRect
HideCaret
PeekMessageW
CreateIconFromResource
SendNotifyMessageW
DefDlgProcW
RegisterClassA
InternalGetWindowText
PeekMessageA
GetSysColor
GetKeyboardLayoutNameW
GetWindowRect
TranslateMessage
GetWindow
DestroyCursor
GetTopWindow
GetMenuItemID
GetForegroundWindow
GetMenuStringA
CreateDialogParamA
OpenIcon
FindWindowExW
MessageBoxA
ClipCursor
DialogBoxParamW
GetNextDlgTabItem
DrawFocusRect
InvalidateRect
KillTimer
GetMenuState
SetCursorPos
SetUserObjectInformationW
DrawAnimatedRects
LoadImageW
DialogBoxIndirectParamA
OemToCharA
EnumChildWindows
GetCursorPos
RemoveMenu
MonitorFromPoint

kernel32

ResetEvent
CreateMailslotW
GetNumberFormatW
FindFirstFileW
CreatePipe
GetWindowsDirectoryW
IsValidLanguageGroup
FindResourceW
IsBadCodePtr
AreFileApisANSI
SetTimerQueueTimer
GetCPInfo
SetNamedPipeHandleState
WaitForMultipleObjectsEx
SleepEx
RemoveDirectoryW
GetSystemDirectoryA
FindFirstFileA
SetThreadContext
GetFileSize
CompareFileTime
FlushFileBuffers
lstrcpynW
HeapUnlock
ReleaseMutex
LoadLibraryW
CancelWaitableTimer
DeleteFileW
CreateMutexW
GetThreadLocale
GetTimeFormatA
lstrlenA
LocalSize
FindResourceExA
FindFirstChangeNotificationW
GetCommModemStatus
GetModuleHandleExW
OpenFileMappingA
SetFilePointer
GetTimeFormatW
GetCommConfig
IsBadWritePtr
FindResourceA
SetCommState
GetThreadPriority
DeleteFileA
SetUnhandledExceptionFilter
GetAtomNameW
lstrcatW
GetUserDefaultLCID

msvcrt

_controlfp
iswspace
gets
isprint
__set_app_type
__p__fmode
wcsstr
strtok
strcoll
__p__commode
_amsg_exit
_initterm
fwrite
_ismbblead
free
printf
islower
iswxdigit
fputc
_XcptFilter
sprintf
tolower
_exit
system
_cexit
wcstol
rand
__setusermatherr
wcscspn
strtoul
wcspbrk
clock
ftell
isalnum
strchr
strtol
iswdigit
strerror
mbtowc
time
__getmainargs
wcscpy
isalpha
vsprintf

gdi32

CreateBitmap
RemoveFontResourceW
GetDIBColorTable
GetPixel
RectInRegion
GetCurrentObject
GetTextExtentPointA
CreateRectRgn
PatBlt
GetTextMetricsW
DPtoLP
CreateFontIndirectW
SetBkMode
EndDoc
FillRgn
SetWindowOrgEx
RestoreDC
CreateHatchBrush
SetAbortProc
GetMapMode
SetStretchBltMode
GetRgnBox
CreatePolygonRgn
SaveDC
CreateFontW
EndPage
SetDIBits
AddFontResourceW
LPtoDP
CreateBrushIndirect
GetLayout
GetTextAlign
GetTextMetricsA
RectVisible
SetTextColor
GetDIBits
StartPage
CreateDIBSection
EndPath
CreateBitmapIndirect
GetTextExtentPoint32W
Rectangle
PathToRegion
GetObjectW

Exports

Exports

?AppNameExW@@YGPAGPAMPAFPAMI<V

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f9f85452afefe094de9093e0a10e131

Headers

File Characteristics

PDB Paths

Imports

comctl32

user32

kernel32

msvcrt

gdi32

Exports

Exports

Sections

.text Size: 143KB - Virtual size: 143KB

.data Size: 22KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 143KB - Virtual size: 143KB

.data
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB