3f77edca0da828002e91a44e6f392e57_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f77edca0da828002e91a44e6f392e57_JaffaCakes118
Size

175KB
MD5

3f77edca0da828002e91a44e6f392e57
SHA1

36a16526ab03a3c808a7cd4418e193c6c3be5805
SHA256

10a64e6b167a5170606de766687d29c6320cfbb99ba2d660763b090f54613793
SHA512

6ae98a96c7a19f2b85025d5f497f195f00bbeb715bb65c0ffbcc99a5216e90e786d3708e1101844ed4ebefa3f03b042066c59ca3d04a8cd06ed744ada5c77a3c
SSDEEP

3072:kAYAFfvwCbBLziVsbFtnKIrCGdfCGnCILVRlENe7bE3ZKRWeGCjSvK4B5z9S8:kTARJbBLtbFtKNGBCGCIPlNWebjSy4PN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f77edca0da828002e91a44e6f392e57_JaffaCakes118

Files

3f77edca0da828002e91a44e6f392e57_JaffaCakes118
.exe windows:5 windows x86 arch:x86

607629eaf0487508de3898259127321a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\iOasaqu\unhkjqe\hxaRkyn\iuwIqxrYjfb.pdb

Imports

shlwapi

StrToIntW

user32

RegisterWindowMessageA
GetKeyboardLayout
EndPaint
RegisterClassW
MapVirtualKeyA
InsertMenuW
LoadStringW
LoadMenuW
SetFocus
CreateWindowExA
InSendMessage
WindowFromPoint
CreateWindowExW
RedrawWindow
GetParent
EnumThreadWindows
SendInput
LoadIconA
DestroyMenu
ReleaseDC
DestroyCursor
CreateIconIndirect
IsWindowUnicode
FindWindowExW
wvsprintfA
BeginDeferWindowPos
EnableMenuItem
GetClassInfoA
SetWindowLongW
ReplyMessage
SendMessageW
MessageBoxA
IsDlgButtonChecked
SetClassLongW
GetWindowRect
SetWindowPos
MessageBoxExA
DialogBoxIndirectParamW
GetNextDlgGroupItem
DestroyAcceleratorTable
GetDCEx
ScrollWindow
GetSystemMetrics
ShowWindowAsync
IsCharLowerA
SetScrollPos
GetWindowTextA
DialogBoxParamW
MonitorFromPoint
DrawIconEx
FindWindowA
GetSystemMenu
ClientToScreen
CharLowerW
GetClassInfoW
VkKeyScanW
CheckRadioButton
CharUpperBuffW
GetClassLongA
DrawTextA
IsCharAlphaW
GetAsyncKeyState
keybd_event
DefFrameProcW
CharNextW
GetDoubleClickTime
wsprintfA
MoveWindow
GetMenuItemCount
DrawTextW
ShowWindow
GetMessageTime
GetKeyboardLayoutList
SetMenuDefaultItem
CopyImage
ShowScrollBar
IsMenu
LoadImageW
DestroyWindow
GetDlgItemInt
CreateDialogParamA
MapVirtualKeyExW
RegisterClassA
GetActiveWindow
GetWindowDC
PostMessageW
EqualRect
GetMessageA
TileWindows
LoadImageA
GetWindowTextLengthW
SystemParametersInfoW
SetParent
AppendMenuW
GetWindowPlacement
InSendMessageEx
GetMenu
DrawStateW
CharUpperBuffA
PeekMessageA
TranslateAcceleratorA
SetDlgItemTextA
CharUpperW
GetMenuCheckMarkDimensions
GetClientRect
PostMessageA
DrawEdge
GetMessagePos
OemToCharBuffA
CharLowerBuffW
SetSysColors
RegisterHotKey
GetWindowLongA
AttachThreadInput
IsIconic
InsertMenuA
SendMessageTimeoutA
TranslateMessage
DefFrameProcA
RemovePropW
DestroyIcon

msvcrt

fwrite
wcscoll
_controlfp
realloc
wcstol
time
toupper
strncpy
__set_app_type
__p__fmode
__p__commode
_amsg_exit
wcspbrk
putchar
sprintf
malloc
rand
putc
localtime
_initterm
isalpha
iswdigit
qsort
wcsrchr
wcstod
strcoll
clearerr
_ismbblead
towlower
fseek
swprintf
iswprint
iswxdigit
_XcptFilter
_exit
iswspace
_cexit
iswalpha
__setusermatherr
atoi
strtok
isdigit
wcsncmp
isupper
getc
__getmainargs
setvbuf

kernel32

LoadLibraryA
SetNamedPipeHandleState
DeleteCriticalSection
FindResourceA
EnterCriticalSection
lstrlenA
MoveFileA
SizeofResource
OpenEventA
SetLastError
CreateDirectoryW
HeapAlloc
GetFileTime
GetTempPathA
GetThreadContext
GetCompressedFileSizeW
CreateDirectoryA
GetModuleHandleA
SearchPathW
CreateWaitableTimerW
FindResourceW
TlsGetValue
IsDBCSLeadByte
HeapSize
SetMailslotInfo
FindFirstFileA
GetShortPathNameA
LockFile
LocalSize
CreateSemaphoreA
CreateFileW
SetCommMask
SetThreadContext
CreateFileMappingW
GetLocalTime
FileTimeToLocalFileTime
PulseEvent
VirtualFree
lstrcpyW
QueryPerformanceCounter
GetFileAttributesExA
SetPriorityClass
GetCurrentThread
CreateNamedPipeA
GlobalAddAtomW
CreatePipe
LockResource
TryEnterCriticalSection
SuspendThread
GlobalAlloc
GetLastError
GetCurrentThreadId
HeapFree
LCMapStringW
LocalFree
SetFilePointer

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

607629eaf0487508de3898259127321a

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 258KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 142KB - Virtual size: 141KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 258KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 142KB - Virtual size: 141KB

.reloc
Size: 1KB - Virtual size: 1KB