42cb26c7b0ad280cf8926f1c53d75b5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42cb26c7b0ad280cf8926f1c53d75b5c_JaffaCakes118
Size

65KB
MD5

42cb26c7b0ad280cf8926f1c53d75b5c
SHA1

413d2bdd2230f0c1fa644eec3eb912f9b4c25bec
SHA256

2485fa6a5d828f03591280d677e651167879316b2e75f743ac83523776f2e553
SHA512

ee0371c54f6076b3ca5d26b4d302224938203387b3cb4a4c7bd598a394afd9396ea3ff058921d5f07ee5ff230fe135ca1c28d4b31e72534e7d4126ed77dbb93a
SSDEEP

1536:64n4V2PTq5D1jWo5HUYLTJxyEWBWfyJB:6HoPT81dmYzyEWBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42cb26c7b0ad280cf8926f1c53d75b5c_JaffaCakes118

Files

42cb26c7b0ad280cf8926f1c53d75b5c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

48acfe17e09371fbab499c6fd3a49e70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\enRbrjIt\szbyzenfoczcq\loyctwmoocpK\zyJEllnMxove.pdb

Imports

kernel32

FileTimeToDosDateTime
DeleteFileA
ResetEvent
UnmapViewOfFile
GetSystemTimeAsFileTime
SetThreadContext
TlsFree
IsValidLanguageGroup
CreateDirectoryA
GetThreadLocale
OpenFile
GetCommandLineA
GetCommandLineW
LockResource
GetNumberFormatA
CancelIo
IsBadWritePtr
QueryDosDeviceW
RaiseException
WaitForSingleObject
FreeResource
lstrcmpiW
SetPriorityClass
GlobalUnlock
CreateSemaphoreW
CopyFileW
UnhandledExceptionFilter
lstrcatW
GetTickCount
HeapReAlloc
SetCommTimeouts
HeapLock
SetCurrentDirectoryA
lstrcpyA
LocalSize
GetCurrentThread
FindFirstChangeNotificationW
CreatePipe
DeleteCriticalSection
GetProcAddress
SearchPathA
SetFilePointer
GetCompressedFileSizeW
CreateFileMappingW
GetComputerNameExW
LeaveCriticalSection
GetStdHandle
GetModuleHandleA
QueryPerformanceCounter
SetThreadExecutionState
ConnectNamedPipe
GetComputerNameA
GlobalDeleteAtom
GetThreadTimes
LoadLibraryA

user32

LoadBitmapW
SetDlgItemTextW
GetMenuStringW
DestroyCursor
GetWindowDC
DeferWindowPos
IsDlgButtonChecked
GetSysColorBrush
wvsprintfW
GetClassInfoExA
SetClassLongW
DialogBoxIndirectParamA
LoadIconA
GetWindowTextLengthW
CharLowerW
CopyImage
DefDlgProcW
GetKeyNameTextW
RegisterHotKey
SetUserObjectInformationW
GetUserObjectInformationW
GetNextDlgTabItem
GetWindowRect
HiliteMenuItem
LoadAcceleratorsW
ScrollWindowEx
IsWindow
GetScrollPos
DrawIcon
SetScrollInfo
AdjustWindowRectEx
CallWindowProcA
GetUserObjectInformationA
CreateIconIndirect
GetDialogBaseUnits
TileWindows
FindWindowA
TrackPopupMenu
DefFrameProcW
GetClipCursor
SendMessageTimeoutA
GetNextDlgGroupItem
CheckRadioButton
SendMessageW
PostThreadMessageA
GetClientRect
DrawTextExW
OemToCharBuffA
GetMenuItemID
GetTopWindow
CreateMenu
EnumThreadWindows
UnloadKeyboardLayout
WaitMessage
InternalGetWindowText
GetLastActivePopup
CharNextW
GetFocus
BeginPaint
DefFrameProcA
IsCharAlphaNumericW
InflateRect
SetMenuItemInfoW
GetMenuState
ReleaseDC
DrawStateA
ShowCaret
OffsetRect
CopyAcceleratorTableW
LoadImageA
GetWindowTextW
GetWindowLongA
SwitchToThisWindow
GetKeyboardLayout
CheckMenuRadioItem
MapVirtualKeyA
ScrollWindow
FindWindowExW
ShowWindowAsync
SetWindowTextW
RegisterWindowMessageW
ModifyMenuW
SetMenu
LoadStringW
CreateIconFromResource
GetSystemMetrics
IntersectRect
GetDlgItemTextA
EqualRect
OpenIcon
SetDlgItemTextA
LoadImageW
CharUpperBuffA
GrayStringW
CharUpperBuffW
GetWindowLongW
TabbedTextOutW
GetScrollRange
DestroyMenu
CascadeWindows
UpdateWindow
DestroyWindow
ShowScrollBar
SetPropW
SetWindowRgn
GetShellWindow
GetKeyboardType
MessageBoxExA
GetCaretPos
GetScrollInfo
DialogBoxParamA
UnionRect
GetPropW
CreateDialogIndirectParamW
LoadCursorW
ToUnicodeEx
CloseDesktop
SetMenuDefaultItem
GetClassInfoW
RegisterWindowMessageA
DefDlgProcA

msvcrt

_controlfp
fclose
mktime
strtok
swscanf
iswspace
wcsncmp
strstr
free
realloc
getc
perror
rand
strncpy
swprintf
__set_app_type
wcscmp
floor
wcspbrk
mbstowcs
gmtime
strspn
iswdigit
__p__fmode
wcsrchr
__p__commode
wcscoll
towlower
malloc
_amsg_exit
_initterm
_ismbblead
_XcptFilter
wcscpy
_exit
localtime
strtoul
_cexit
wcstod
clearerr
gets
__setusermatherr
strchr
strerror
qsort
memset
vswprintf
__getmainargs
fputc

shlwapi

PathIsUNCA

Exports

Exports

?ForwardControlItem@@YGK_KK:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ips1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips2
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.read
Size: 1024B - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ips3
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips4
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48acfe17e09371fbab499c6fd3a49e70

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.ips1 Size: 6KB - Virtual size: 5KB

.ips2 Size: 512B - Virtual size: 88B

.read Size: 1024B - Virtual size: 39KB

.ips3 Size: 512B - Virtual size: 192B

.data Size: 3KB - Virtual size: 2KB

.ips4 Size: 7KB - Virtual size: 7KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 21KB

.ips1
Size: 6KB - Virtual size: 5KB

.ips2
Size: 512B - Virtual size: 88B

.read
Size: 1024B - Virtual size: 39KB

.ips3
Size: 512B - Virtual size: 192B

.data
Size: 3KB - Virtual size: 2KB

.ips4
Size: 7KB - Virtual size: 7KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 2KB - Virtual size: 1KB