3c6c69123b370a3eeba312ab6a62e4e8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c6c69123b370a3eeba312ab6a62e4e8_JaffaCakes118
Size

61KB
MD5

3c6c69123b370a3eeba312ab6a62e4e8
SHA1

18063843d61b543d30e88bcbeb962329dccc413b
SHA256

a112f12fd7b6ef8c117d6875f342adffe872ad7b2e20a38ccc975ac467e31e95
SHA512

dadb600c4860c0ef6c55270a5662008baa9e1d5838a63437d5480e1f0c030b68b53e17a2e0efbb5661b028b3b7884b5af48870c4ba60bd53912723cdf925a106
SSDEEP

1536:pPQjnAILAl4CMWCn/X+4GG+vb1XT6hDkLp5IkV:po0IECbNYG2b1XTNp1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c6c69123b370a3eeba312ab6a62e4e8_JaffaCakes118

Files

3c6c69123b370a3eeba312ab6a62e4e8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

137fc468b20cf7b9ca881978e39df296

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\mpqYivWGqwPq\ezMfoouldU\ewYzMWiukl\eMjgxod.pdb

Imports

user32

CreateWindowExA
VkKeyScanW
DialogBoxIndirectParamA
GetWindowTextA
HiliteMenuItem
GetSystemMetrics
EnumWindows
GetWindowTextW
GetKeyState
KillTimer
GetWindowTextLengthW
GetKeyNameTextW
DestroyMenu
CheckRadioButton
OffsetRect
LoadBitmapW
IsDialogMessageA
GetMenuCheckMarkDimensions
CascadeWindows
SetDlgItemTextW
ShowWindow
DefFrameProcW
IsZoomed
MapWindowPoints
HideCaret
CharToOemBuffA
CharToOemW
GetDlgItemTextW
GetClipCursor
CreateCaret
OpenInputDesktop
GetWindow
DrawTextA
GetMessageTime
GetScrollPos
SetParent
CharPrevA
EnumChildWindows
SendMessageTimeoutW
CreatePopupMenu
MessageBoxExW
IsCharLowerA
GrayStringW
GetNextDlgGroupItem
CopyRect
PostThreadMessageW
EnumThreadWindows
GetForegroundWindow
ShowCursor
RegisterWindowMessageW
ClientToScreen
UnloadKeyboardLayout
GetWindowPlacement
CreateWindowExW
SetScrollPos
AdjustWindowRectEx
SetForegroundWindow
ShowOwnedPopups
GetDlgItem
GetUserObjectInformationW
TabbedTextOutW
GetScrollRange
DrawEdge
TranslateMessage
PostMessageA
GetSysColor
LoadImageA
LoadMenuA
GetLastActivePopup
SwitchToThisWindow
GetIconInfo
SetCursorPos
GetMenuState
DialogBoxParamW
CloseDesktop
RegisterClassExW
LoadIconA
MessageBoxW
LockWindowUpdate
CreateIconFromResource
CheckMenuItem
GetClassLongA
GetScrollInfo
InvalidateRgn
IsWindow
EndPaint
CallWindowProcW
SendMessageA
DrawStateA
MapDialogRect
GetKeyboardType
PeekMessageA
GetDlgItemTextA
ClipCursor
DestroyCaret
IsWindowVisible
MonitorFromRect
IsMenu
ReplyMessage
IsWindowEnabled
GetWindowLongW
RegisterHotKey
CharNextA
InsertMenuA
GetDoubleClickTime
SetDlgItemInt
RegisterClassA
CharUpperBuffW
SetPropW
BeginPaint
DrawAnimatedRects
PostMessageW
GetMonitorInfoW
CallWindowProcA
CharLowerBuffW
CreateDialogParamA
FindWindowExW
GetKeyboardLayoutList

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW
FindTextW
CommDlgExtendedError

msvcrt

free
mktime
fgetc
ftell
wcscmp
_controlfp
iswspace
system
towupper
__set_app_type
mbtowc
__p__fmode
isprint
puts
strspn
__p__commode
isspace
gmtime
islower
_amsg_exit
sprintf
_initterm
putchar
wcspbrk
_ismbblead
_XcptFilter
_exit
strcspn
tolower
remove
strerror
getenv
iswdigit
strncmp
_cexit
fclose
gets
iswxdigit
wcstoul
wcsstr
time
__setusermatherr
__getmainargs
toupper
sscanf
wcscpy
clock

comctl32

CreatePropertySheetPageW
ImageList_Read
ImageList_GetImageCount
ImageList_Remove
ImageList_Create
ImageList_AddMasked

shlwapi

StrToIntW

kernel32

FlushFileBuffers
GetTimeZoneInformation
GetTempPathW
LocalFree
SetNamedPipeHandleState
TransactNamedPipe
SetErrorMode
GetModuleFileNameA
VirtualFree
GetSystemDefaultLangID
GetFileAttributesA
HeapValidate
HeapSize
SetThreadContext
VerifyVersionInfoW
ResumeThread
lstrcatA
VirtualAlloc
GlobalFlags
DefineDosDeviceW
FileTimeToDosDateTime
GlobalMemoryStatusEx
GetComputerNameExA
GetThreadContext
Sleep
SuspendThread
LoadLibraryA
GetShortPathNameA
GlobalMemoryStatus
GetDateFormatA
lstrlenA
OpenEventA
LoadLibraryW
GetFileTime
GetComputerNameW
GetThreadTimes
IsBadReadPtr
IsDBCSLeadByte
GetSystemTimeAsFileTime
WaitForMultipleObjects
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetTempPathA
GetCommTimeouts
ReleaseSemaphore
OpenEventW
GetBinaryTypeA
DeleteFileA
SetSystemTimeAdjustment
GetProcAddress
LocalUnlock
GetStartupInfoW

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

137fc468b20cf7b9ca881978e39df296

Headers

File Characteristics

PDB Paths

Imports

user32

comdlg32

msvcrt

comctl32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 42KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 42KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 1KB - Virtual size: 1KB