472f17d9a32680c5850d6e1316a23752_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

472f17d9a32680c5850d6e1316a23752_JaffaCakes118
Size

110KB
MD5

472f17d9a32680c5850d6e1316a23752
SHA1

8cbf5868f0524c7adacfb9a9b8aae3377285236b
SHA256

b3f7cdc515669ab3d75815505864f2bf7271e7f370cc5ae279705dd522e03b5d
SHA512

db13314c9d1ee28ef390569b77853582a0d49612bb144a017edc95384d780ca0afea8434c76f8d0923dace571214d5d06ce585a2b639134195131ad52b899a0c
SSDEEP

3072:Eh/REyxVRlUVi7bb/Btg09ibjtSQrwtt:Eh/RoGbD92UQrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
472f17d9a32680c5850d6e1316a23752_JaffaCakes118

Files

472f17d9a32680c5850d6e1316a23752_JaffaCakes118
.exe windows:5 windows x86 arch:x86

54d66e447dd0ef9d29e03366215ec900

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\FKtUqfVgyh\Ijsuvncbakq\sidAVBzbzwqdL\Zgmgebw.pdb

Imports

comdlg32

ChooseColorW
GetFileTitleW
GetOpenFileNameA
PrintDlgExW
FindTextW
ReplaceTextW

shlwapi

UrlIsA

user32

DrawTextExW
InvalidateRgn
ReplyMessage
ClipCursor
SendInput
SetMenuDefaultItem
OffsetRect
SetUserObjectInformationW
GetScrollRange
CheckMenuItem
GetSystemMetrics
AppendMenuA
SetDlgItemTextW
SetWindowPlacement
ClientToScreen
wvsprintfW
SendMessageTimeoutA
CascadeWindows
keybd_event
EnableWindow
FillRect
GetDlgItemTextW
GetWindowLongA
GetDlgItem
SetWindowRgn
TrackPopupMenu
GrayStringW
GetMessageA
AllowSetForegroundWindow
SetWindowPos
SetParent
DrawIcon
GetKeyboardType
MapVirtualKeyA
GetClassLongA
CharPrevA
LoadIconA
GetMenuStringW
GetKeyboardLayoutList
CharToOemA
DefFrameProcA
EnumThreadWindows
RegisterClassA
RegisterHotKey
SetWindowTextA
GetMenuItemCount
IsCharLowerA
GetDC
GetClientRect
PostMessageA
UnloadKeyboardLayout
IsZoomed
RegisterWindowMessageA
LoadMenuA
BringWindowToTop
GetPropW
PostThreadMessageA
LoadCursorW
CharPrevW
wsprintfW
DestroyCursor
ScrollWindowEx
MapDialogRect
GetUpdateRect
GetSysColor
IsDialogMessageA
DestroyAcceleratorTable
SendMessageW
DefFrameProcW
CreateCaret
DefWindowProcW
GetParent
DrawTextW
InsertMenuW
GetClassLongW
SetTimer
CopyImage
GetNextDlgGroupItem
OemToCharA
SetRect
IsRectEmpty
GetCaretPos
DeferWindowPos
SetDlgItemInt
SetScrollInfo
GetActiveWindow
DispatchMessageA
EnumWindows
EnableMenuItem
AdjustWindowRectEx
DrawEdge
WindowFromPoint
BeginDeferWindowPos
AttachThreadInput
BeginPaint
GetAltTabInfoA
GetFocus
ChildWindowFromPointEx
DestroyMenu
GetScrollPos
GetClassNameW
IsCharAlphaW
GetKeyboardLayoutNameW
GetClassInfoExW
GetIconInfo
SendNotifyMessageW
EndPaint
GetAsyncKeyState
LoadAcceleratorsA
ArrangeIconicWindows
LoadImageW
SystemParametersInfoA
SetFocus
RedrawWindow
GetKeyState
DialogBoxParamA
GetMenuItemID
MapVirtualKeyW
IsWindowEnabled
TranslateAcceleratorA
CreateMenu

msvcrt

_controlfp
__set_app_type
iswctype
__p__fmode
__p__commode
getenv
strspn
_amsg_exit
_initterm
wcsrchr
gmtime
free
bsearch
_ismbblead
isdigit
towlower
wcstombs
strtoul
wcsstr
realloc
atol
clock
_XcptFilter
fgetc
mktime
wcscspn
_exit
wcsncmp
system
_cexit
strchr
__setusermatherr
iswalpha
wcstok
strstr
strpbrk
rand
setvbuf
mbstowcs
strcpy
towupper
isupper
floor
__getmainargs
malloc
putchar
atoi

kernel32

GetTempPathW
SetUnhandledExceptionFilter
lstrcpyA
IsBadWritePtr
GetLocaleInfoW
CopyFileA
InitializeCriticalSection
IsValidLocale
MoveFileA
HeapAlloc
GetCommProperties
GetModuleFileNameA
SetFileAttributesW
LockResource
HeapFree
GetDateFormatA
TerminateThread
SetCurrentDirectoryA
GetModuleHandleW
WaitForMultipleObjects
CreateDirectoryA
GetLocalTime
LocalFree
GetFileAttributesExA
OpenEventW
CompareFileTime
LoadResource
SetErrorMode
HeapReAlloc
FlushViewOfFile
lstrcmpA
ClearCommBreak
ReleaseSemaphore
GetProcessHeap
GetNumberFormatA
CreatePipe
GetFullPathNameW
LoadLibraryExW
FindResourceW
FindNextFileW
FoldStringW
GetFullPathNameA
GlobalLock
GetAtomNameW
GetCommTimeouts
IsValidLanguageGroup
GetCurrentDirectoryW
GetModuleFileNameW
SetCommMask
GetFileInformationByHandle
RemoveDirectoryW
GetSystemDefaultLangID
MoveFileW
EnterCriticalSection
lstrcpynW
GetFileAttributesExW
GetFileType
lstrcmpiA
DisconnectNamedPipe

Exports

Exports

?BinaryRedirectNetDYuyhDBH@@YGKGE[D

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54d66e447dd0ef9d29e03366215ec900

Headers

File Characteristics

PDB Paths

Imports

comdlg32

shlwapi

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 328KB

.rsrc Size: 78KB - Virtual size: 77KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 328KB

.rsrc
Size: 78KB - Virtual size: 77KB

.reloc
Size: 2KB - Virtual size: 1KB