42514fbb184e4c18cdef6d8b54bb3f47_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42514fbb184e4c18cdef6d8b54bb3f47_JaffaCakes118
Size

209KB
MD5

42514fbb184e4c18cdef6d8b54bb3f47
SHA1

c9316f13675b0a41b4bb5e991a73a02aab8b3796
SHA256

ab4262384cd3d903ff4bb04b643c23ef8fccce2f15b7bd81925376c22392b0d5
SHA512

84834ed84db6779fafbdf39c3640ed8fa2f8bca75fafb51450cd07c18478c0272aa9b643fcf024d1d07f01da69dd322782a5dff15ad57b2e928d25902d796472
SSDEEP

3072:TFQHEELoxnfRmFo8lGqy85B+lltpP1v3pqfGVNP9/RBLGBQMYXOerP8:5uEEsxn+oUG3Pl7SBQMcOerP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42514fbb184e4c18cdef6d8b54bb3f47_JaffaCakes118

Files

42514fbb184e4c18cdef6d8b54bb3f47_JaffaCakes118
.exe windows:5 windows x86 arch:x86

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

S:\avuymIrz\fbzRefdPcv\xZtGqBqgb.pdb

Imports

msvcrt

_controlfp
calloc
floor
wcschr
towlower
__set_app_type
strchr
__p__fmode
qsort
iswxdigit
iswalpha
__p__commode
wcsncmp
free
towupper
fputs
getenv
clock
swprintf
putchar
puts
mbtowc
iswspace
tolower
_amsg_exit
printf
_initterm
_ismbblead
_XcptFilter
strncmp
remove
strtol
wcslen
_exit
_cexit
isspace
strcpy
__setusermatherr
strncpy
iswdigit
iswctype
malloc
__getmainargs
swscanf

user32

GetMenuItemInfoW
GetLastActivePopup
FindWindowExA
HideCaret
GetUserObjectInformationW
EqualRect
TranslateAcceleratorW
ChildWindowFromPoint
TileWindows
LoadMenuA
EnableScrollBar
GetMenuItemCount
FindWindowA
MessageBoxExW
InSendMessage
MonitorFromPoint
GetWindow
ShowScrollBar
LoadImageA
DialogBoxIndirectParamA
MapVirtualKeyA
RemovePropW
GetUpdateRgn
RegisterClassA
SetDlgItemTextA
DrawMenuBar
GetMenu
PostMessageW
GetDlgCtrlID
VkKeyScanW
GetIconInfo
MapWindowPoints
CharNextW
SendMessageTimeoutA
CharLowerBuffW
GetWindowLongW
WaitForInputIdle
MapVirtualKeyExW
CheckRadioButton
AllowSetForegroundWindow
MessageBoxA
GetMessageA
SetMenuDefaultItem
MessageBoxW
GetMenuStringW
LoadMenuW
GetSystemMetrics
SendMessageA
GetMenuState
DrawIcon
DestroyCursor
AdjustWindowRect
GetSysColor
HiliteMenuItem
AppendMenuW
CheckMenuRadioItem
LoadStringW
ScrollWindow
CharPrevW
SetSysColors
GetDlgItem
SetMenuItemBitmaps
GetDesktopWindow
GetParent
EndTask
CreateMenu
GetCaretPos
SendMessageW
InsertMenuItemW
CreatePopupMenu
GetMonitorInfoW
MapVirtualKeyW
FrameRect
EnableMenuItem
UnloadKeyboardLayout
WindowFromPoint
DrawAnimatedRects
ScrollWindowEx
SetRect
SetDlgItemInt
BeginPaint
CreateIconIndirect
SetMenuItemInfoW
SetScrollInfo
CharToOemA
SendNotifyMessageW
GetClassNameW
TranslateAcceleratorA
ShowCursor
SetWindowTextA
CharLowerA
InsertMenuW
AppendMenuA
GetWindowDC
SetRectEmpty
GetSysColorBrush
ShowWindow
ChangeMenuW
OemToCharA
IsCharAlphaW
SystemParametersInfoW
RegisterClassW
ShowWindowAsync
wsprintfA
SetWindowLongW
SwitchToThisWindow
wsprintfW
IsDialogMessageA
GetKeyboardType
EnumChildWindows

gdi32

CreateRectRgnIndirect
CreateBrushIndirect
PtVisible
SelectPalette
CreateDIBitmap
ResizePalette
MoveToEx
CreateFontIndirectA
Ellipse
DeleteDC
ExtTextOutW
CreateBitmap
RectVisible
Escape
SetDIBColorTable
OffsetViewportOrgEx
GetBitmapBits
DeleteObject
CreateHatchBrush
CreatePolygonRgn
CombineRgn
SetBitmapBits
PolyBezier
SetAbortProc
OffsetRgn
WidenPath
CreateSolidBrush
GetTextMetricsA
GetPaletteEntries
CreateICW
SelectClipRgn
SetBitmapDimensionEx
SetBrushOrgEx
SelectObject
GetTextExtentPoint32A
FillRgn
CreateEllipticRgnIndirect
GetPixel
GetStockObject
GetCurrentObject
GetROP2
CreateRectRgn
StartDocW
BitBlt
BeginPath
RealizePalette

kernel32

FindFirstFileW
LeaveCriticalSection
DeleteFileA
InitializeCriticalSection
CallNamedPipeW
SetErrorMode
GetTempFileNameA
CreateWaitableTimerW
FindFirstFileA
HeapLock
RemoveDirectoryW
CreateFileMappingW
LocalSize
GetShortPathNameA
GetModuleHandleW
WriteFile
GlobalSize
CreateSemaphoreW
GetFileAttributesExW
ResetEvent
SleepEx
lstrcpynW
CreateEventA
GetSystemDirectoryW
VerSetConditionMask
LoadLibraryExW
TlsGetValue
IsBadReadPtr
GetShortPathNameW
GetUserDefaultLangID
LocalLock
ConvertDefaultLocale
GetLocaleInfoA
CreateMutexW
SetFileApisToOEM
EscapeCommFunction
SetThreadContext
MoveFileExA
GetThreadLocale
UnlockFile
AddAtomW
GetSystemTimeAdjustment
WaitForMultipleObjects
GetTempPathA
GetFileSize
lstrcmpiW
GlobalFree
CreateFileMappingA
OpenFile

comdlg32

PrintDlgExW
PageSetupDlgW
ChooseColorW
GetFileTitleW
GetSaveFileNameA

shlwapi

PathFileExistsA

Exports

Exports

?HideKeyboardNew@@YGXD<V

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

PDB Paths

Imports

msvcrt

user32

gdi32

kernel32

comdlg32

shlwapi

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 71KB

.data Size: 134KB - Virtual size: 199KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 71KB - Virtual size: 71KB

.data
Size: 134KB - Virtual size: 199KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB