37f2c99ce1703bc4205a5cb92c7dd3a0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37f2c99ce1703bc4205a5cb92c7dd3a0_JaffaCakes118
Size

138KB
MD5

37f2c99ce1703bc4205a5cb92c7dd3a0
SHA1

c9d888386f44e2940f57593b349edffe19c0873b
SHA256

1898d9e4cc2c14aea381e206e0cab8f6ad0d875ff5825fac61343baa6f588c5e
SHA512

83ad011f63469601ed445f902c9d335d618200a738f5e901a90ee81060f6afb1437cfff3490acfd9ed159fd911f8737f9beafc58dec779391ef2489c839302b5
SSDEEP

3072:jg42RM2HqgRrzvcSmk7Po3sQIvlcoLVfcMvlRIxy7Vmy7D:jj2mfgRPc6TntrLV5kEhdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f2c99ce1703bc4205a5cb92c7dd3a0_JaffaCakes118

Files

37f2c99ce1703bc4205a5cb92c7dd3a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f493defea9a4b19a444183d03d2fcfa5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\TVPilks\iitfADwder\wqpzjKOdlnUxu\swvXsbvi.pdb

Imports

msvcrt

clock
system
strcspn
_controlfp
__set_app_type
__p__fmode
fflush
fgetc
wcsstr
getenv
__p__commode
realloc
strncpy
floor
putchar
_amsg_exit
mbstowcs
_initterm
toupper
wcscspn
strncmp
towupper
wcscat
localtime
strstr
strtoul
isprint
strtol
_ismbblead
isalpha
strrchr
vswprintf
swscanf
iswxdigit
fwrite
_XcptFilter
iswdigit
qsort
memset
atol
_exit
vsprintf
_cexit
__setusermatherr
fprintf
__getmainargs
strpbrk
exit

kernel32

LocalReAlloc
SetFilePointer
SetThreadPriority
SearchPathA
OpenEventA
CreateThread
lstrcmpiA
FindResourceA
InitializeCriticalSection
CreateWaitableTimerA
ConnectNamedPipe
GetVersionExW
GetUserDefaultUILanguage
lstrcmpA
EscapeCommFunction
SystemTimeToFileTime
DuplicateHandle
lstrcatW
GlobalMemoryStatus
HeapAlloc
GetProcessHeap
FindCloseChangeNotification
SleepEx
GetProcAddress
TlsFree
FindResourceExA
lstrcpynW
GetWindowsDirectoryA
MulDiv
GetCommState
GetSystemTimeAdjustment
GetModuleFileNameW
GlobalSize
SetFileApisToOEM
GetCurrentThreadId
IsBadStringPtrW
CloseHandle
SuspendThread
RaiseException
GetSystemDefaultUILanguage
LocalAlloc
MoveFileA
EnumResourceNamesW
TryEnterCriticalSection
GetComputerNameExW
FlushViewOfFile
HeapValidate
GetModuleFileNameA
LocalLock
LoadLibraryExW
CreateSemaphoreA
GetStartupInfoA
GetFileInformationByHandle
RemoveDirectoryW
GetDateFormatA
TransactNamedPipe
GetUserDefaultLangID
lstrcatA
HeapFree

shlwapi

StrToIntW

user32

DeleteMenu
GetMessageW
EnableWindow
IsCharLowerA
ShowCaret
IsCharUpperA
CascadeWindows
DestroyAcceleratorTable
TranslateMessage
EnumChildWindows
CreateDialogParamW
LoadBitmapW
CharToOemW
DrawTextW
GetCursorPos
LockWindowUpdate
MapWindowPoints
RedrawWindow
GetMessageA
CreateCursor
GetAsyncKeyState
IsDialogMessageA
CharLowerBuffW
GetUserObjectInformationW
OpenInputDesktop
PostQuitMessage
SetWindowLongA
RegisterWindowMessageW
DialogBoxIndirectParamA
ShowCursor
GetGUIThreadInfo
TranslateAcceleratorA
mouse_event
GetWindowTextA
GetMenuCheckMarkDimensions
DrawTextA
InvertRect
IntersectRect
LoadStringW
CallWindowProcA
SetFocus
SetScrollPos
MapDialogRect
WaitForInputIdle
HiliteMenuItem
GetKeyState
GetWindowLongA
CheckMenuRadioItem
TileWindows
DrawAnimatedRects
UpdateWindow
RemovePropW
OffsetRect
CharPrevW
AdjustWindowRectEx
LookupIconIdFromDirectory
CreateAcceleratorTableW
IsZoomed
GetMenuItemCount
CheckDlgButton
TrackPopupMenu
GetSysColor
CreatePopupMenu
CopyRect
CharUpperA
GetActiveWindow
SetWindowTextW
CharNextA
PostThreadMessageA
CopyAcceleratorTableW
EnableMenuItem
GetClassLongA
GetTopWindow
CharNextExA
CreateDialogIndirectParamW
CharUpperBuffW
FindWindowW
DestroyIcon
RemoveMenu
GetMenuStringA
LoadMenuW
SetActiveWindow
InSendMessageEx
GetWindowPlacement
CreateDialogParamA
CheckRadioButton
PostMessageW
GetFocus
DispatchMessageW
MapVirtualKeyExW
LoadStringA
GetWindowLongW
GetSysColorBrush
GetWindow
GetNextDlgGroupItem
DialogBoxParamA
SetCursorPos
wsprintfA
GetWindowModuleFileNameW
DefFrameProcW
InsertMenuW
AllowSetForegroundWindow
GetMenu
GetDCEx
OemToCharA
GetClassInfoA
IsMenu
RegisterClassExW
SetRectEmpty
ValidateRect
InvalidateRect
GetDlgItemTextA
GetCaretBlinkTime
RegisterWindowMessageA
GetLastActivePopup
DrawIcon
InvalidateRgn
SetTimer
SetClassLongW
DestroyMenu
LoadAcceleratorsW
GetKeyboardLayoutNameW
IsDlgButtonChecked
DialogBoxIndirectParamW
CopyImage

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f493defea9a4b19a444183d03d2fcfa5

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

shlwapi

user32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 76KB

.rsrc Size: 110KB - Virtual size: 110KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 76KB

.rsrc
Size: 110KB - Virtual size: 110KB

.reloc
Size: 2KB - Virtual size: 2KB