357532d628efd8528aca9b7e5ef42a36_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

357532d628efd8528aca9b7e5ef42a36_JaffaCakes118
Size

216KB
MD5

357532d628efd8528aca9b7e5ef42a36
SHA1

e1844da1cfbd9c720abde1228d54b526fce25f6f
SHA256

31dcbc9d32b8631f395751580e87c901502b4ba3d2cba820be8ea176e6dd8e45
SHA512

6b85aac7901f21f6bbc1dad56fb25e76c5b2808a34761d9efa8b2a0a5f4c28846c6a582d8f101918ce32d4d1d2f6d7157dcd5e8fbd1df89045b648b74c2fd7cc
SSDEEP

6144:NEIGLJCD3S8VqgrHqpvXBqnqwU/XWb/gJ:NEIGLjWrHqVMqwoX4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357532d628efd8528aca9b7e5ef42a36_JaffaCakes118

Files

357532d628efd8528aca9b7e5ef42a36_JaffaCakes118
.exe windows:5 windows x86 arch:x86

26e0f020eb5cde6dc0367a2676afa561

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\Wbukomp\anyncwusbb\tolyWVnrl\dhftbePor\pyNVVqkrc.pdb

Imports

shlwapi

StrStrA

gdi32

SetWindowExtEx
CreateRectRgn
EnumFontFamiliesW
GetBitmapBits
GetROP2
SelectObject
GetBkMode
SetBkColor
WidenPath
RectVisible
EnumFontsW
GetDIBColorTable
StartDocW
CreateRectRgnIndirect
RemoveFontResourceW
SetTextColor
SetAbortProc
SetViewportOrgEx
CreateDIBitmap
SetTextAlign
DPtoLP
LineTo
DeleteDC
OffsetRgn
CreateCompatibleBitmap
CreateBrushIndirect
GetNearestPaletteIndex
GetTextAlign
CreateDCW
CreateRoundRectRgn
CreatePen
Escape
CreateFontW
SelectClipRgn
PtInRegion
CreateICW
CreateBitmap
MoveToEx
StretchDIBits
SetDIBits
GetTextCharsetInfo
GetSystemPaletteUse
PathToRegion
SetDIBitsToDevice
GetViewportOrgEx
SetBitmapBits
GetPixel
FillRgn
SetStretchBltMode
GetDIBits
SetPaletteEntries
GetTextExtentPoint32W
ExcludeClipRect
GetObjectW
AddFontResourceW
CreateFontIndirectA
SelectPalette
CreatePalette
ExtTextOutW
GetTextExtentPointW
GetObjectA
ExtFloodFill
GetNearestColor
GetMapMode
Polyline

comctl32

CreateStatusWindowW
ImageList_AddMasked
ImageList_Read
PropertySheetW
ImageList_GetImageCount
InitCommonControlsEx
ImageList_SetIconSize
DestroyPropertySheetPage
CreateToolbarEx

user32

SwapMouseButton
MonitorFromRect
LoadBitmapW
MoveWindow
LoadMenuA
CharNextA
SetParent
DragObject
DispatchMessageW
GetUpdateRgn
GetDlgItemTextA
GetScrollInfo
DrawIconEx
CheckMenuItem
FindWindowA
ShowWindow
CharPrevA
keybd_event
GetWindowTextA
GetAsyncKeyState
FillRect
GetDCEx
GetMenu
ScrollWindow
SetMenu
LoadCursorW
InvalidateRect
GetNextDlgGroupItem
IntersectRect
LoadImageW
GetWindowTextW
UnionRect
LoadImageA
MapWindowPoints
DrawTextExW
CallWindowProcA
DestroyMenu
ActivateKeyboardLayout
CreatePopupMenu
CopyImage
PostQuitMessage
RegisterClassExW
EnableMenuItem
SetCursorPos
MessageBoxW
GetClassInfoExA
GrayStringW
ScrollWindowEx
GetCaretPos
GetMonitorInfoW
IsMenu
GetMenuItemInfoW
DefWindowProcA
GetUpdateRect
RegisterHotKey
DrawEdge
GetMessagePos
GetKeyboardLayoutNameW
GetDlgCtrlID
SetFocus
MessageBoxExW
RegisterWindowMessageW
SetUserObjectInformationW
InSendMessageEx
PostThreadMessageW
GetMenuState
AdjustWindowRect
GetLastActivePopup
GetCaretBlinkTime
GetTopWindow
InsertMenuA
GetMenuItemRect
SetWindowTextW
GetParent
IsDialogMessageA
ExitWindowsEx
GetClassInfoA
DrawMenuBar
DrawTextW
SwitchToThisWindow
GetForegroundWindow
CharToOemBuffA
IsZoomed
OpenDesktopW
CreateAcceleratorTableW
CharToOemW
LoadAcceleratorsW
AppendMenuW
GetWindowTextLengthW
OemToCharA
FindWindowExA
InSendMessage
GetSubMenu
SetCaretPos
WindowFromPoint
EndPaint
SetScrollRange
LoadBitmapA
IsWindowUnicode
IsWindowVisible
SendDlgItemMessageA
CreateDialogParamW
GetClassLongA
ShowOwnedPopups
GetSysColorBrush
SetWindowTextA
DrawFocusRect
RegisterClassA
SetWindowLongA
CreateCursor
SetWindowPlacement
GetDlgItemTextW
OpenIcon
IsIconic
DispatchMessageA
CreateIconIndirect
SendDlgItemMessageW
DialogBoxIndirectParamW
DefDlgProcA
PostMessageA
GetClientRect
EqualRect
ScreenToClient
SetMenuDefaultItem
WaitMessage
CreateDialogIndirectParamW
BeginDeferWindowPos
CharToOemA
GetClassLongW
SetWindowPos
CopyAcceleratorTableW
GetKeyNameTextW
DestroyWindow
SetPropW
OpenInputDesktop
DestroyCaret
DialogBoxParamA
DialogBoxParamW
EnableScrollBar
ChildWindowFromPointEx
CharUpperA
DestroyAcceleratorTable
DestroyIcon
AdjustWindowRectEx
InflateRect
PtInRect
GetSystemMenu
GetScrollPos
GetDlgItemInt
FindWindowExW
CheckMenuRadioItem
GetMessageA
KillTimer
GetWindowRect
DestroyCursor
InvertRect
CreateWindowExA
OemToCharBuffA
LoadStringW
ShowCaret
TranslateAcceleratorW
RegisterClassW

kernel32

GetTempFileNameW
QueryPerformanceCounter
GlobalFlags
RemoveDirectoryW
GlobalFindAtomW
GlobalDeleteAtom
RegisterWaitForSingleObject
CreateFileMappingA
GetCommConfig
FindResourceExW
GetStringTypeExW
GetOverlappedResult
SetFileAttributesW
GetComputerNameExW
GetSystemWindowsDirectoryW
SearchPathW
SetThreadLocale
DeleteCriticalSection
DuplicateHandle
WaitForSingleObject
MoveFileA
HeapUnlock
SetCommTimeouts
CancelWaitableTimer
GetFileAttributesA
HeapLock
FindFirstFileW
FindFirstFileA
GetThreadPriority
FlushViewOfFile
GetFileTime
GetSystemDirectoryA
ConnectNamedPipe
GetComputerNameExA
GlobalUnlock
GetTempPathW
TryEnterCriticalSection
IsBadStringPtrW
GetTickCount
GetSystemTimeAsFileTime
GetNumberFormatA
AddAtomW
SetCommState
LocalUnlock
IsValidLocale
ExitThread
lstrcpyA
GetACP
SetFilePointer
SetWaitableTimer
GetCommandLineW
GetPriorityClass
GetComputerNameA
OpenFile
FindNextChangeNotification
SearchPathA
GetModuleFileNameW
LocalReAlloc
IsBadReadPtr
GetThreadTimes
GetModuleHandleA
GetModuleFileNameA
IsBadCodePtr
WideCharToMultiByte
GetTimeZoneInformation
MultiByteToWideChar
TransactNamedPipe
GetShortPathNameA
FreeResource
GetTempPathA
GetCurrentDirectoryW
OpenFileMappingA
SetHandleInformation
FreeLibrary
lstrcmpA
CreateFileW

msvcrt

isalpha
strncmp
iswprint
getc
wcstombs
localtime
_controlfp
rand
setvbuf
wcstol
setlocale
exit
isalnum
wcspbrk
ungetc
fprintf
__set_app_type
__p__fmode
__p__commode
free
strchr
time
vsprintf
_amsg_exit
strrchr
mktime
memset
wcsstr
toupper
strspn
putc
strcoll
wcscoll
wcstok
_initterm
iswdigit
fseek
_ismbblead
perror
gets
wcstoul
remove
strtok
strstr
_XcptFilter
strerror
_exit
wcscpy
bsearch
iswspace
_cexit
fgetc
strncpy
clock
strpbrk
iswalpha
__setusermatherr
wcsncpy
malloc
wcschr
__getmainargs

Exports

Exports

?EnumExpressionW@@IJMJPAHJ@X

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26e0f020eb5cde6dc0367a2676afa561

Headers

File Characteristics

PDB Paths

Imports

shlwapi

gdi32

comctl32

user32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 57KB

.code Size: 12KB - Virtual size: 12KB

.data Size: 12KB - Virtual size: 79KB

.rsrc Size: 130KB - Virtual size: 130KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 58KB - Virtual size: 57KB

.code
Size: 12KB - Virtual size: 12KB

.data
Size: 12KB - Virtual size: 79KB

.rsrc
Size: 130KB - Virtual size: 130KB

.reloc
Size: 2KB - Virtual size: 1KB