37a080047c6613fc086131b79694dc46_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37a080047c6613fc086131b79694dc46_JaffaCakes118
Size

203KB
MD5

37a080047c6613fc086131b79694dc46
SHA1

fadd954408abd45ae78fb7078df6ac6a201e8aea
SHA256

7e44100c115fcc2726fbf962e77acd45062b3e7a4c5f0afd2ba2f40ba10180a6
SHA512

b85b99a71771bb1840331ba39d38eeea5d199b53fd94efd6785cac3632ad19cf5d87d5a9825feff5dece812f62bc0ce851345ca6ac56744e913bdbfc48f1d060
SSDEEP

3072:AoFJwghWBUe+v6Vr5Q/g0z0a7uP0J4hZas/qhvvdg9juJ/3Ts3EKtfu:bwghWuedVNYO0Jmj/qhO1iTMEKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a080047c6613fc086131b79694dc46_JaffaCakes118

Files

37a080047c6613fc086131b79694dc46_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\qTDzNrZgucypv\jbWyxEmvga\tjZfurwhRbEr\JsDmkhb.pdb

Imports

msvcrt

strcpy
ungetc
clearerr
wcsncmp
_controlfp
malloc
__set_app_type
system
__p__fmode
calloc
__p__commode
strtoul
vsprintf
wcspbrk
_amsg_exit
_initterm
isalnum
fgetc
_ismbblead
bsearch
strchr
_XcptFilter
strcoll
time
localtime
wcstoul
wcscpy
putchar
fputc
wcscat
strcspn
fseek
mbstowcs
towlower
qsort
swscanf
_exit
wcstombs
_cexit
wcsncpy
isprint
__setusermatherr
vswprintf
__getmainargs

gdi32

SetDIBColorTable
SetBrushOrgEx
CombineRgn
GetBkMode
SelectPalette
CreateBrushIndirect
CreatePolygonRgn
CreateHatchBrush
GetSystemPaletteUse
CreateFontW
CreateFontIndirectW
Polyline
GetTextMetricsA
TranslateCharsetInfo
UnrealizeObject
GetDeviceCaps
GetROP2
EnumFontFamiliesExW
CreateDiscardableBitmap
SetDIBits
DeleteDC
GetViewportOrgEx
GetSystemPaletteEntries
WidenPath
GetObjectA
GetTextMetricsW
GetPixel
RemoveFontResourceW
RectVisible
GetMapMode
StretchBlt
GetNearestPaletteIndex
SetDIBitsToDevice
GetLayout
SetTextColor
CreateEllipticRgnIndirect
GetTextColor
GetTextFaceW
CreatePalette
SetPixel
SetAbortProc
ExcludeClipRect
Ellipse
ResizePalette
SelectClipRgn
Polygon
CreateHalftonePalette

shlwapi

PathFileExistsA

kernel32

FileTimeToSystemTime
OpenFile
SearchPathA
DeleteCriticalSection
GetPriorityClass
CancelWaitableTimer
lstrlenA
GetAtomNameW
SetThreadAffinityMask
GlobalAlloc
SetHandleCount
GetTempPathW
GlobalGetAtomNameW
CreateEventA
SuspendThread
GetThreadContext
lstrcmpW
IsBadReadPtr
lstrcpynW
CreateRemoteThread
GetCurrentDirectoryW
GetShortPathNameA
CreateFileA
EnumResourceNamesA
GetModuleFileNameW
RtlUnwind
LocalAlloc
WinExec
GetModuleHandleA
GetLastError
GetComputerNameA
GetThreadLocale
GetFullPathNameW
RemoveDirectoryW
MapViewOfFile
SetTimerQueueTimer
GetHandleInformation
GetFileAttributesExA
LockFile
AreFileApisANSI
FindResourceExW
FindClose
SetMailslotInfo
FreeLibrary
ReadFile
SetThreadPriority
GetTempPathA
DeviceIoControl
FileTimeToLocalFileTime
CreateWaitableTimerA
GetVersion

user32

CheckMenuRadioItem
SetForegroundWindow
GetScrollPos
MapDialogRect
ChangeMenuW
GetClassLongW
MapVirtualKeyExW
FindWindowExA
DispatchMessageA
IsCharAlphaNumericW
CreateCaret
DrawFrameControl
CloseDesktop
DialogBoxParamW
ArrangeIconicWindows
EqualRect
LoadStringA
PeekMessageA
CharUpperW
GetDoubleClickTime
IsWindowVisible
DrawTextW
DrawMenuBar
HiliteMenuItem
TileWindows
CharLowerBuffW
CreateWindowExA
SetWindowTextA
SetRectEmpty
FrameRect
GetMessageExtraInfo
SetUserObjectInformationW
DestroyAcceleratorTable
GetMenuItemCount
keybd_event
OpenIcon
SetActiveWindow
SetSysColors
LoadMenuA
CharNextW
MessageBoxA
TranslateAcceleratorW
DefFrameProcA
SystemParametersInfoA
RegisterClassW
MessageBoxExA
CharLowerW
DialogBoxParamA
GetMessageW
SetPropW
FindWindowA
IsChild
CopyAcceleratorTableW
EnableWindow
SetScrollInfo
LoadStringW
CharToOemW
GetClipCursor
SetMenuDefaultItem
InvalidateRect
LoadBitmapA
GetForegroundWindow
DrawStateW
TranslateAcceleratorA
IsWindow
SendInput
KillTimer
LoadImageA
GetKeyboardType
DrawIcon
TabbedTextOutW
GetWindow
InflateRect
MessageBoxW
SetCursor
ToUnicodeEx
IsRectEmpty
GetClassLongA
IsWindowEnabled
SwitchToThisWindow
GetDCEx
LoadCursorA
InvalidateRgn
IsWindowUnicode
OffsetRect
CheckRadioButton
RegisterWindowMessageW
RegisterHotKey
IntersectRect
OpenInputDesktop
RegisterClassA
SetWindowRgn
LoadMenuW
GetMenuCheckMarkDimensions
DefWindowProcA
AdjustWindowRectEx
AllowSetForegroundWindow
GetWindowTextLengthW
IsIconic
SetMenuItemInfoW
SetMenu
ClipCursor
LookupIconIdFromDirectory
CharUpperA
LockWindowUpdate
GetMenuStringA
MapWindowPoints
GetTopWindow
CreateDialogParamW
GetNextDlgGroupItem
PtInRect

Exports

Exports

?HidePointerOriginal@@YGFKPAIPAD<V

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

PDB Paths

Imports

msvcrt

gdi32

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 134KB - Virtual size: 201KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 134KB - Virtual size: 201KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB