3e413e96671721037129bd2346212683_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e413e96671721037129bd2346212683_JaffaCakes118
Size

146KB
MD5

3e413e96671721037129bd2346212683
SHA1

911b0b29a245963c77a81d07a084c25fb8fc334b
SHA256

9e6b52a3818ac4fc0b0517da6793535a381a6861effc84b334b25f40ca620502
SHA512

0ea6c0ad05db0bc8a84ca0a36d2a7604619d7aa136b287484b43a0544df0e262a61516583de9f80cc207e8a783a101c9636dad4943dd1b666fc462e6c8aca184
SSDEEP

3072:zyOFncCKV1LSnBRudH9aDPSBMt5CTK+PAYEOoif:/FsDLSnBRod0PSBMyWFyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e413e96671721037129bd2346212683_JaffaCakes118

Files

3e413e96671721037129bd2346212683_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e972ef8eca3add0ca8a5547cff64e7ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\yZuFczL\KfavacicehqLk\mexcLtqvDVcci\YmZsswwpsLGQn.pdb

Imports

msvcrt

wcscpy
mbstowcs
fread
strtol
toupper
isalpha
clock
fseek
strrchr
_controlfp
rand
clearerr
wcschr
__set_app_type
__p__fmode
printf
fclose
islower
wcstol
putc
__p__commode
mktime
fgetc
sscanf
atoi
wcscspn
isupper
_amsg_exit
_initterm
_ismbblead
sprintf
vsprintf
_XcptFilter
_exit
swscanf
_cexit
gmtime
__setusermatherr
srand
iswprint
iswxdigit
malloc
strncmp
strerror
vswprintf
fprintf
iswdigit
__getmainargs

comdlg32

PageSetupDlgW
PrintDlgW
GetOpenFileNameA
GetSaveFileNameA
GetOpenFileNameW

user32

OpenIcon
MoveWindow
GetScrollRange
LoadStringA
EnumThreadWindows
SendDlgItemMessageW
LoadStringW
PostMessageW
DrawMenuBar
OemToCharBuffA
wsprintfW
GetLastActivePopup
TranslateAcceleratorW
SetMenuItemBitmaps
GetClassInfoExW
GetWindowLongA
GetClassInfoExA
TabbedTextOutW
GetMenuState
GetClassNameW
SetWindowPlacement
KillTimer
DrawTextA
SetRect
GetCursorPos
FindWindowW
DrawStateW
CheckMenuItem
wvsprintfW
InSendMessageEx
InvalidateRgn
GetTopWindow
GetUpdateRgn
DefFrameProcW
GetScrollPos
DrawTextExW
DialogBoxParamW
MapVirtualKeyExW
PostQuitMessage
DrawAnimatedRects
GetDC
MessageBoxExA
SetMenuDefaultItem
GetWindowRect
wsprintfA
DialogBoxIndirectParamA
LoadMenuW
MonitorFromRect
CascadeWindows
GetPropW
IsChild
ShowOwnedPopups
CreateCaret
IsCharLowerA
DragObject
DestroyWindow
DrawStateA
GetScrollInfo
EnumChildWindows
SendDlgItemMessageA
ScrollWindow
IsCharAlphaNumericW
PostThreadMessageA
UnloadKeyboardLayout
ShowCaret
SetPropW
LockWindowUpdate
GetFocus
GetDoubleClickTime
CopyRect
DrawEdge
GetClassLongW
RemoveMenu
SetForegroundWindow
CreatePopupMenu
HideCaret
GetForegroundWindow
DeferWindowPos
GetDlgItem
InflateRect
GetSysColorBrush
SetRectEmpty
SetUserObjectInformationW
LoadAcceleratorsW
GetDCEx
IsZoomed
DrawFocusRect
GetMenuItemInfoW
DialogBoxParamA
AppendMenuW
LoadIconW
LoadImageW
AdjustWindowRectEx
FrameRect
SetWindowRgn
GetWindowLongW
LoadBitmapA
EnableWindow
GetDlgItemTextW
OpenInputDesktop
CharLowerBuffW
SetLastErrorEx
GetWindow
ShowScrollBar
AppendMenuA
SendNotifyMessageW
DispatchMessageA
SetMenu
GetKeyboardType
SetScrollRange
CharPrevA
WaitMessage
SetWindowTextW
CallWindowProcA
DeleteMenu
PostMessageA
GetMenuStringA
keybd_event
SetWindowLongW
mouse_event

kernel32

lstrcpynW
QueryPerformanceCounter
GetOEMCP
GetLastError
SetupComm
FindNextFileA
SetThreadLocale
SetFileApisToOEM
GlobalFlags
FindClose
GetVersion
WaitForMultipleObjectsEx
CopyFileA
SetSystemTime
GetUserDefaultLCID
GlobalFindAtomW
GetWindowsDirectoryW
LoadLibraryA
GetFileTime
GetThreadPriority
SetCurrentDirectoryW
FormatMessageA
SetFileAttributesW
GetWindowsDirectoryA
ClearCommError
lstrlenW
CreateMailslotW
ExitThread
IsBadStringPtrW
HeapSize
ResumeThread
LoadLibraryW
ReadFile
CreateEventA
FileTimeToDosDateTime
GetComputerNameExA
GetCommConfig
SetEvent
lstrcmpiA
GetModuleFileNameW
VirtualProtect
GlobalCompact
EnumSystemLocalesA
GetSystemDefaultUILanguage
CreatePipe
FileTimeToLocalFileTime
GetACP
WaitCommEvent
RemoveDirectoryA
lstrcatA
SetErrorMode
MoveFileA
OpenFile
SuspendThread
CancelIo
GetExitCodeThread

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erts
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.info
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e972ef8eca3add0ca8a5547cff64e7ff

Headers

File Characteristics

PDB Paths

Imports

msvcrt

comdlg32

user32

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.init Size: 6KB - Virtual size: 5KB

.erts Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 126KB

.info Size: 1024B - Virtual size: 704B

.data Size: 3KB - Virtual size: 2KB

.udata Size: 113KB - Virtual size: 112KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.init
Size: 6KB - Virtual size: 5KB

.erts
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 126KB

.info
Size: 1024B - Virtual size: 704B

.data
Size: 3KB - Virtual size: 2KB

.udata
Size: 113KB - Virtual size: 112KB

.reloc
Size: 1KB - Virtual size: 1KB