39db70ce3e12cfa82fe082c61b354119_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

39db70ce3e12cfa82fe082c61b354119_JaffaCakes118
Size

169KB
MD5

39db70ce3e12cfa82fe082c61b354119
SHA1

688b7455132a3c13ba539b3c1a3a206e0787ab6f
SHA256

f8fd50a2dc5d39995e4e610f300ca05cc10c9d5921e962a3506fb4be3dde9715
SHA512

76ef22727bc9f064edc79eee322aa6b2c0c93fd2e6ae12ab2303752e5536824acb51c9a9e2c02efd00bb88755c45891938bed3cb3820ce514bee7fbcd21d952a
SSDEEP

3072:Gu4G+mWscsVpzMiiu2xqtlep6JSe+Yb5l4fLceHcdE5yIVwfKq8ahhKXVF:30mzzTtaqtIaVFXg3HFykwSqlqX7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39db70ce3e12cfa82fe082c61b354119_JaffaCakes118

Files

39db70ce3e12cfa82fe082c61b354119_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7a9b9b21abe8a4fbbaac3901d2ba6a30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\dlnELkqQiyq\swtaqpynMN\irPkgXCzll.pdb

Imports

shlwapi

UrlGetPartW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgExW

user32

LoadImageW
GetDlgCtrlID
InSendMessage
CopyRect
SetScrollRange
GetNextDlgGroupItem
GetClassInfoW
SetTimer
SetDlgItemTextA
SetClassLongW
SetCursorPos
InsertMenuItemW
DrawStateW
WaitForInputIdle
wvsprintfA
SystemParametersInfoW
RegisterWindowMessageW
BeginDeferWindowPos
GetMenuItemID
GetTopWindow
GetWindowLongA
GetClientRect
CheckRadioButton
DefFrameProcW
SetCaretPos
CreateWindowExA
UnloadKeyboardLayout
EndDialog
PostMessageA
GetDCEx
SetSysColors
IsDialogMessageA
SetLastErrorEx
GetCursorPos
IsDialogMessageW
wsprintfW
GetScrollInfo
SetRectEmpty
CreateIconIndirect
InvalidateRect
GetKeyNameTextW
ValidateRect
InternalGetWindowText
SetWindowTextA
BringWindowToTop
EqualRect
InSendMessageEx
DrawIcon
ReleaseDC
SetRect
OemToCharA
GrayStringW
IntersectRect
DefDlgProcA
RegisterClassA
ReplyMessage
SetScrollPos
FindWindowA
CharNextExA
MessageBoxA
SetMenuItemBitmaps
EnumThreadWindows
GetMenuStringW
SetMenuDefaultItem
IsCharAlphaW
InvalidateRgn
CheckMenuItem
GetMenuItemRect
EndPaint
PeekMessageA
DrawMenuBar
RegisterClassExA
HiliteMenuItem
ModifyMenuW
CreateIconFromResource
GetDoubleClickTime
FindWindowW
CheckDlgButton
GetMenuItemInfoW
AdjustWindowRect
GetMessageExtraInfo
HideCaret
DeleteMenu
GetClassInfoExW
ClipCursor
CascadeWindows
MapVirtualKeyExW
SetMenuItemInfoW
SystemParametersInfoA
SendNotifyMessageW
DrawAnimatedRects
GetMenuState
GetWindowPlacement
SendMessageA
EnableWindow
GetScrollRange
GetDlgItem
LoadIconW
SetFocus
DefWindowProcW
TranslateAcceleratorA
IsCharAlphaA
GetActiveWindow
CreateCaret
CharLowerA
CharLowerW
SetWindowLongW
CallWindowProcA
DispatchMessageA
LockWindowUpdate
IsWindowEnabled
UpdateWindow
EnumWindows
ChildWindowFromPoint
LoadStringW
SetParent
CreatePopupMenu
IsCharAlphaNumericW
IsZoomed

comctl32

InitCommonControlsEx
ImageList_Read
ImageList_Draw
ImageList_ReplaceIcon
PropertySheetW
ImageList_GetIcon

msvcrt

wcschr
_controlfp
tolower
__set_app_type
fwrite
__p__fmode
iswspace
putc
fputs
wcspbrk
sscanf
fgets
time
vsprintf
mbtowc
clearerr
_vsnwprintf
isupper
strtol
strspn
__p__commode
remove
puts
strerror
_amsg_exit
isprint
wcsncmp
strncpy
isalnum
_initterm
exit
isalpha
wcsncpy
floor
_ismbblead
fgetc
toupper
getc
iswctype
_XcptFilter
strncmp
_exit
_cexit
calloc
__setusermatherr
wcstombs
__getmainargs
mbstowcs

kernel32

EnumResourceNamesW
WaitForMultipleObjectsEx
CreateFileA
SetCurrentDirectoryA
GetTempPathW
HeapSize
GetCompressedFileSizeW
FindNextFileW
CreateFileMappingW
Sleep
GetFileAttributesA
FindFirstFileA
EnumResourceNamesA
GetTimeFormatA
SetWaitableTimer
ReleaseMutex
MapViewOfFile
GetModuleHandleA
GlobalHandle
GetStartupInfoW
WriteFile
MoveFileA
HeapValidate
SearchPathW
lstrcpynA
GetModuleFileNameA
GetTempFileNameA
LoadResource
CreateNamedPipeW
InitializeCriticalSection
lstrcmpW
TlsSetValue
OpenFile
SetThreadContext
DisconnectNamedPipe
RemoveDirectoryA
SetThreadLocale
FreeLibrary
FormatMessageW
CreateRemoteThread
CompareFileTime
FlushViewOfFile
DefineDosDeviceW
CreateWaitableTimerA
SetTimerQueueTimer
GetPriorityClass
GetSystemDefaultLangID
GetStdHandle
GetOEMCP
CompareStringW
CompareStringA
GetFileType

Exports

Exports

?CreatDlgItemList@@YGKPBDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cexp
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.regs
Size: 1KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.citab
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$dbug
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lime
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdat
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a9b9b21abe8a4fbbaac3901d2ba6a30

Headers

File Characteristics

PDB Paths

Imports

shlwapi

comdlg32

user32

comctl32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.cexp Size: 512B - Virtual size: 93B

.regs Size: 1KB - Virtual size: 255KB

.data Size: 2KB - Virtual size: 1KB

.citab Size: 6KB - Virtual size: 5KB

.$dbug Size: 512B - Virtual size: 93B

.lime Size: 512B - Virtual size: 295B

.tdat Size: 512B - Virtual size: 192B

.rsrc Size: 136KB - Virtual size: 136KB

.text
Size: 22KB - Virtual size: 22KB

.cexp
Size: 512B - Virtual size: 93B

.regs
Size: 1KB - Virtual size: 255KB

.data
Size: 2KB - Virtual size: 1KB

.citab
Size: 6KB - Virtual size: 5KB

.$dbug
Size: 512B - Virtual size: 93B

.lime
Size: 512B - Virtual size: 295B

.tdat
Size: 512B - Virtual size: 192B

.rsrc
Size: 136KB - Virtual size: 136KB