3958c136f7e4cddb49acc6832f643fd1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3958c136f7e4cddb49acc6832f643fd1_JaffaCakes118
Size

207KB
MD5

3958c136f7e4cddb49acc6832f643fd1
SHA1

4b126f0b173dadf0e4ad40be241b3b7849e4eb3b
SHA256

337fdd149e8dce7b985c763f9ab0275f19ba74e1a45569154850176fac5c275b
SHA512

21f51f56e2e0fc823040a5114c1d44b99809f8a9f10e60296d8e31a92fa13c3ac5c3d4d58d3a28f0a971753d759b40846d431893b7a73d0014098c6499018d6f
SSDEEP

6144:poL9izSBJEB/2W7ern+FJVcME/10VROEdUzm1tl5lPHsaP:eKu6eC3cMEd0LVtl5lPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3958c136f7e4cddb49acc6832f643fd1_JaffaCakes118

Files

3958c136f7e4cddb49acc6832f643fd1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a8dafb02801845e165886805ba6b157

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\GDorpghPLsDrhq\dvzpIiDwopu\PxwSShfgJyu.pdb

Imports

msvcrt

_controlfp
strstr
wcspbrk
tolower
strchr
iswalpha
iswspace
wcstombs
vsprintf
wcsrchr
strspn
__set_app_type
gets
__p__fmode
__p__commode
remove
getenv
fputs
realloc
_amsg_exit
vswprintf
fprintf
mbstowcs
strrchr
strncpy
wcsncmp
_initterm
malloc
swprintf
wcslen
fgetc
time
qsort
srand
isdigit
_ismbblead
wcscoll
isupper
wcstol
wcstod
localtime
fwrite
strerror
_XcptFilter
_exit
strcoll
memset
strpbrk
strtol
strcspn
mktime
printf
wcsncpy
wcscpy
exit
_cexit
__setusermatherr
floor
iswctype
__getmainargs

user32

DialogBoxIndirectParamW
GetDlgItemTextW
RegisterWindowMessageW
GetMessageExtraInfo
SendMessageTimeoutA
SetClassLongW
SetWindowTextW
SendMessageA
LockWindowUpdate
TileWindows
GetAsyncKeyState
CharPrevA
SetCursor
OpenInputDesktop
GetMessagePos
MessageBoxW
AllowSetForegroundWindow
GetWindowDC
GetParent
GetSystemMenu
GetUpdateRect
RegisterWindowMessageA
CharUpperBuffA
InSendMessageEx
CharUpperBuffW
EnableWindow
RegisterClassExW
DestroyWindow
ShowOwnedPopups
GetClassInfoW
HiliteMenuItem
DrawAnimatedRects
GetWindowTextLengthW
SetWindowLongW
UnionRect
ValidateRect
DialogBoxParamA
LoadStringW
ClipCursor
IsWindowEnabled
GetPropW
CharNextW
SwapMouseButton
DialogBoxIndirectParamA
WindowFromPoint
GetNextDlgGroupItem
ShowWindow
CharLowerBuffW
EnumWindows
DestroyMenu
GetKeyboardLayout
InvalidateRect
GetSubMenu
FindWindowExA
RemovePropW
GetMenuState
TranslateAcceleratorW
UnloadKeyboardLayout
SetWindowLongA
SetMenu
CheckMenuItem
BeginDeferWindowPos
DefWindowProcW
ShowWindowAsync
CreateIconIndirect
ChangeMenuW
SetCursorPos
MessageBoxExA
AdjustWindowRectEx
GetCaretPos
GetClientRect
SetDlgItemTextW
LoadCursorW
LoadImageW
DefFrameProcW
InsertMenuW
FindWindowExW
CreateWindowExA
MessageBoxExW
ScrollWindow
MapVirtualKeyA
DrawMenuBar
MapDialogRect
SendNotifyMessageW
UpdateWindow
OffsetRect
LoadAcceleratorsW
AttachThreadInput
IsCharAlphaNumericW
GetKeyNameTextW
CharLowerA
SetMenuDefaultItem
ScrollWindowEx
SetParent
BringWindowToTop
IsCharLowerA
GetMessageTime
GetForegroundWindow
SetDlgItemInt
CharNextA
GetMessageA
ReleaseDC
GetScrollInfo
LoadCursorA
DefWindowProcA
GetClassInfoExW
SetPropW
FindWindowA
InvertRect
GetDlgItemInt
LookupIconIdFromDirectory
CharToOemW
FindWindowW
SetWindowRgn
CopyAcceleratorTableW
InvalidateRgn
DrawIcon
SetLastErrorEx
GetDCEx
CharPrevW
ShowCursor
SendDlgItemMessageA
IsMenu
CreateWindowExW
CopyImage
SetWindowTextA
GetWindowTextA
GetUserObjectInformationW
LoadMenuW
RegisterClassW
GetClassNameW
BeginPaint
ChildWindowFromPointEx
CascadeWindows
GetClassLongA
CreateMenu
GetDialogBaseUnits
wsprintfA
GetMenuItemID
LoadIconA
ClientToScreen
SendDlgItemMessageW
OemToCharA
EnumChildWindows
CreatePopupMenu
GetDlgCtrlID
DialogBoxParamW
IsZoomed
GetScrollPos
MapVirtualKeyExW
IsWindowUnicode
EnumThreadWindows
InsertMenuItemW
ReplyMessage
VkKeyScanW
PostThreadMessageW
TabbedTextOutW
DrawFocusRect
EqualRect
CallWindowProcA

gdi32

CreateSolidBrush
CreateHalftonePalette
GetBkMode
CreateFontA
TextOutA
BitBlt
IntersectClipRect
CreateRoundRectRgn
GetPixel
ResizePalette
ScaleWindowExtEx
CreateDIBSection
GetDIBColorTable
CreateCompatibleBitmap
GetViewportOrgEx
SetPaletteEntries
Ellipse
FillRgn
OffsetRgn
SetBitmapDimensionEx
GetObjectA
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesExW
CreateBitmap
GetTextAlign
TextOutW
LineDDA
GetSystemPaletteEntries
GetFontData
StretchBlt
CreatePatternBrush
GetNearestColor
GetDIBits
DPtoLP
PtVisible
GetObjectW
GetTextExtentPointW
DeleteObject
GetMapMode
CreateEllipticRgnIndirect
GetTextMetricsW
ScaleViewportExtEx
GetClipBox
SetROP2
CreatePen
SetBitmapBits
SetRectRgn
GetRgnBox
EnumFontsW
SetPixel
CreateFontIndirectA
EndDoc
SelectClipRgn
SetTextColor
GetTextFaceW
SelectPalette
LPtoDP
Polyline
SelectObject
RealizePalette
ExtFloodFill
SetViewportOrgEx
StretchDIBits
Polygon

comctl32

CreateStatusWindowW
ImageList_Destroy
ImageList_LoadImageW
ImageList_SetIconSize
ImageList_Draw
ImageList_Read
ImageList_AddMasked
ImageList_GetImageCount
DestroyPropertySheetPage

comdlg32

ChooseFontW
GetSaveFileNameA
PrintDlgW
CommDlgExtendedError
PageSetupDlgW
ChooseColorW
GetFileTitleW

kernel32

lstrlenA
DeleteFileW
FreeLibrary
GetShortPathNameW
WaitForMultipleObjectsEx
RegisterWaitForSingleObject
LoadLibraryExA
SetCommState
GlobalSize
GetUserDefaultLangID
lstrcatW
WaitForMultipleObjects
SuspendThread
ClearCommError
GlobalAddAtomW
HeapLock
GetThreadPriority
GetPriorityClass
GetAtomNameW
FindResourceExW
GetDateFormatW
IsBadReadPtr
IsValidLanguageGroup
SearchPathA
SetFileApisToOEM
GetLocaleInfoW
GetFileTime
GetModuleFileNameA
GetFullPathNameW
GetTimeFormatW
GetAtomNameA
TerminateThread
OpenFileMappingW
SetThreadAffinityMask
TryEnterCriticalSection
ExitThread
GetFileAttributesExA
GetVersionExA
GetModuleHandleA
ConnectNamedPipe
GetCommProperties
EnumResourceNamesW
lstrcpynA
CompareStringA
GetDateFormatA
SetHandleCount
SetFileTime
GetComputerNameA
GetOverlappedResult
DefineDosDeviceW
GlobalFlags
MulDiv
GlobalFree
GetCommState
GlobalLock
RemoveDirectoryA
LocalAlloc
SetCommBreak
GetFileSize
CreateSemaphoreW
FreeResource
RemoveDirectoryW
CloseHandle
lstrcpyW
SleepEx
CancelWaitableTimer
GlobalMemoryStatusEx
LocalUnlock
FormatMessageW
AreFileApisANSI
lstrcmpiA
VerifyVersionInfoW
MoveFileA
CancelIo
SetNamedPipeHandleState

Exports

Exports

?IsValidFilePathEx@@IJPAGNHJF@X

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0a8dafb02801845e165886805ba6b157

Headers

File Characteristics

PDB Paths

Imports

msvcrt

user32

gdi32

comctl32

comdlg32

kernel32

Exports

Exports

Sections

.text Size: 190KB - Virtual size: 190KB

.data Size: 20KB - Virtual size: 19KB

.text
Size: 190KB - Virtual size: 190KB

.data
Size: 20KB - Virtual size: 19KB