450efa546714d7c6aa00d98051c5dd81_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

450efa546714d7c6aa00d98051c5dd81_JaffaCakes118
Size

212KB
MD5

450efa546714d7c6aa00d98051c5dd81
SHA1

71f7d06c0287f5d28cd6f9105308bc2ca848ae9e
SHA256

e67032dd74ae7d6947a8959c071cce26dc3805fe9f732a9914584a40a4fa7c96
SHA512

d3cdf418b79a5a50db748703caa294c2dfb239cac6ee35bf1b3a5584c011b82febc8a0e009b3f5477667f758c1568144ff1d0fefee9862440d3074b849157d74
SSDEEP

6144:2PIscDLYtVvi4O1uOmOj4MevtLkYu5VMTzHi0:EQD6VS5mievel5eN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
450efa546714d7c6aa00d98051c5dd81_JaffaCakes118

Files

450efa546714d7c6aa00d98051c5dd81_JaffaCakes118
.exe windows:5 windows x86 arch:x86

31329a511ee750d717d937c49d551ba0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\hOclQCeGahxtjP\ZkKopnM\apVVxgvRU\xlxdKNx.pdb

Imports

comctl32

ImageList_AddMasked
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Draw
DestroyPropertySheetPage

msvcrt

putc
sscanf
strtol
atoi
_controlfp
iswprint
fwrite
fseek
setvbuf
strpbrk
wcstombs
strerror
swscanf
__set_app_type
localtime
__p__fmode
__p__commode
time
_amsg_exit
_initterm
isupper
wcscspn
printf
sprintf
_acmdln
floor
exit
toupper
gmtime
_ismbblead
_XcptFilter
wcsncpy
strstr
_exit
_cexit
isspace
__setusermatherr
wcscmp
__getmainargs

kernel32

GetNumberFormatA
GetFileSize
AreFileApisANSI
GetTickCount
lstrcpyW
GlobalGetAtomNameW
CompareStringA
CompareFileTime
EnumResourceTypesA
lstrlenW
GetCommTimeouts
CancelIo
HeapWalk
CreateWaitableTimerA
GetUserDefaultUILanguage
TransactNamedPipe
BuildCommDCBAndTimeoutsW
GetTimeFormatW
FormatMessageA
CopyFileA
ResetEvent
GetFileAttributesExW
SetFileTime
lstrcpynA
FindNextFileW
GetLocaleInfoW
GlobalFree
FindCloseChangeNotification
SetLocalTime
GetLongPathNameW
GlobalHandle
GetModuleFileNameA
HeapUnlock
GetModuleFileNameW
ConnectNamedPipe
SetFileAttributesW
HeapSize
GetComputerNameExA
GetHandleInformation
UnlockFile
GetBinaryTypeW
GetVersion

gdi32

CreateHalftonePalette
SetDIBitsToDevice
SetBrushOrgEx
SetMapMode
SetBkMode
GetTextExtentPoint32W
DeleteObject
GetObjectA
GetCharWidth32W
CreateBrushIndirect
StretchBlt
SetBkColor
PolyBezier
PtVisible
SetTextAlign
Ellipse
GetDIBits
SelectObject
GetPaletteEntries
GetTextMetricsA
WidenPath
GetTextExtentPoint32A
CreateSolidBrush
GetMapMode
ExtTextOutW
Escape
Polygon
CreateFontA
UnrealizeObject
CreateDIBSection
GetStockObject
GetTextMetricsW
RectInRegion
GetBitmapBits
EnumFontFamiliesExW

user32

ClipCursor
LoadCursorW
DrawFocusRect
RegisterClassExW
ArrangeIconicWindows
CharNextExA
ScreenToClient
ShowCursor
ShowScrollBar
CharToOemA
IsIconic
SwitchToThisWindow
DestroyMenu
GetDlgItem
CharUpperA
GetDC
WaitForInputIdle
MessageBoxW
GetPropW
OemToCharA
SetWindowLongW
SetMenu
ShowCaret
MessageBoxExA
GetDialogBaseUnits
CheckRadioButton
GetWindowTextLengthW
SetPropW
GetNextDlgTabItem
GetSystemMenu
SendMessageA
LoadBitmapW
GetSubMenu
DestroyWindow
SendMessageW
FindWindowW
LoadImageW
SetWindowPos
CascadeWindows
AllowSetForegroundWindow
ScrollWindow
CreateDialogIndirectParamW
PostThreadMessageA
IsWindowUnicode
DrawTextA
OffsetRect
GetMenuItemID
CheckDlgButton
GetKeyboardType
PostMessageW
LoadAcceleratorsW
IsWindow
CheckMenuRadioItem
WindowFromPoint
MapVirtualKeyW
AdjustWindowRectEx
ToUnicodeEx
GetClipCursor
SetScrollPos
DestroyCaret
SendMessageTimeoutW
ActivateKeyboardLayout
GetUpdateRgn
GetWindowLongA
RegisterWindowMessageA
SetActiveWindow
GetClientRect
CharUpperW
PeekMessageA
MoveWindow
CreateMenu
EnableMenuItem
GetActiveWindow
InSendMessage
GetClassInfoW
GetWindow
GetClassInfoExW
DrawAnimatedRects
UnionRect
DragObject
DefWindowProcA
DrawMenuBar
SendInput
IsRectEmpty
IsCharLowerA
GetScrollRange
CreateWindowExA
GetMessageTime
GetClassInfoExA

shlwapi

PathStripPathW

Exports

Exports

?SleepAhHJDud@@YGKEPA_WG@Z
?SleepUDSUDlkdlsds@@YGKEPA_WG@Z
?SleepUDudjkUD@@YGKEPA_WG@Z
?SleepYDyjDuUI@@YGKEPA_WG@Z

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 323B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31329a511ee750d717d937c49d551ba0

Headers

File Characteristics

PDB Paths

Imports

comctl32

msvcrt

kernel32

gdi32

user32

shlwapi

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.edata Size: 512B - Virtual size: 323B

.data Size: 19KB - Virtual size: 19KB

.rdata Size: 1024B - Virtual size: 63KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 75KB - Virtual size: 74KB

.edata
Size: 512B - Virtual size: 323B

.data
Size: 19KB - Virtual size: 19KB

.rdata
Size: 1024B - Virtual size: 63KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 2KB - Virtual size: 1KB