5c0c1f2bc40af134c2dfdfb7f3c47b35_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5c0c1f2bc40af134c2dfdfb7f3c47b35_JaffaCakes118
Size

181KB
MD5

5c0c1f2bc40af134c2dfdfb7f3c47b35
SHA1

068bfc1a023fbbbaded3ddc35c86935df831ef30
SHA256

33e7919da7279094cca4c53e55d07368640dc89317910352d3c4c43e10ff566b
SHA512

6bba56875470f79a151371847312fe7c6382fe506dfb8939cbcad31edec329bf93526124047abb18ce9183ba7535e02c007fc3d7e222f5e721c1e70e5193af2b
SSDEEP

3072:MO1T/iHYWEYPmTeHG7m+TH4ZU+zXOPkqH/QqJCHlnKNCDIoutLEpt:91rkExuKH4ZU2ePkqHvJC1KUIoutLE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0c1f2bc40af134c2dfdfb7f3c47b35_JaffaCakes118

Files

5c0c1f2bc40af134c2dfdfb7f3c47b35_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fb7589c6db4c866f2e857e6e407389c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\lrkbcfTYiOcf\BcqgfjqirDggrh\zgXLlnIH\znfZnpEPm.pdb

Imports

user32

ShowCaret
LoadImageA
GetScrollInfo
DestroyWindow
InternalGetWindowText
SetCursor
ActivateKeyboardLayout
PostQuitMessage
SetWindowPos
TrackPopupMenuEx
GetSysColorBrush
CreateIconIndirect
TranslateAcceleratorA
DrawFocusRect
LoadAcceleratorsA
GetClassInfoExA
CreateIconFromResource
EnumChildWindows
OpenIcon
GetClassLongW
SetWindowPlacement
wvsprintfW
MessageBoxExW
GetActiveWindow
SetMenuDefaultItem
IsZoomed
keybd_event
GetDialogBaseUnits
RemovePropW
IsIconic
GetDlgCtrlID
SystemParametersInfoA
EndDialog
ChangeMenuW
GetParent
IsCharAlphaW
DialogBoxIndirectParamW
HiliteMenuItem
SetWindowLongW
InvalidateRgn
GetMenuItemID
MapVirtualKeyW
GetDlgItemTextW
ClipCursor
DestroyCursor
CheckMenuItem
SetWindowLongA
LoadMenuA
IsCharAlphaNumericW
GetScrollPos
CreateDialogIndirectParamW
SetUserObjectInformationW
LoadIconA
BeginDeferWindowPos
ValidateRect
OpenInputDesktop
WaitMessage
IntersectRect
CreatePopupMenu
DestroyCaret
CreateMenu
ChildWindowFromPoint
FindWindowW
SetMenuItemInfoW
DialogBoxParamA
CheckRadioButton
TabbedTextOutW
GetKeyboardLayoutNameW
ReleaseDC
DestroyAcceleratorTable
KillTimer
IsDlgButtonChecked
GetWindowTextW
RegisterClassW
SetWindowRgn
LoadCursorW
DrawTextW
SendDlgItemMessageA
ExitWindowsEx
CopyImage
ShowWindow
CharUpperW
RegisterClassExW
DefDlgProcA
SetWindowTextW
ToUnicodeEx
mouse_event
DrawIcon
MonitorFromPoint
SwitchToThisWindow
EqualRect
SetParent
CreateDialogParamW
WindowFromPoint
TileWindows
SendMessageTimeoutA
GetClassLongA
ScrollWindowEx
AppendMenuW
AttachThreadInput
DrawMenuBar
SetWindowTextA
InsertMenuItemW
RedrawWindow
GetUpdateRect
GetMenuItemCount
AdjustWindowRect
ShowScrollBar
DestroyMenu
EnableMenuItem
DrawFrameControl
EnableWindow
CharNextA
GetMenuCheckMarkDimensions
GetCursorPos
CascadeWindows
wsprintfW
WaitForInputIdle
GetMonitorInfoW
CheckMenuRadioItem

msvcrt

atol
free
_controlfp
wcstod
wcstok
isxdigit
__set_app_type
toupper
strncpy
puts
wcscoll
isupper
isalpha
strspn
fread
ungetc
strerror
wcscspn
memset
calloc
__p__fmode
vsprintf
clearerr
fprintf
__p__commode
wcsrchr
setlocale
_amsg_exit
wcscpy
wcstoul
_initterm
_ismbblead
isdigit
remove
_XcptFilter
mbtowc
wcschr
isspace
wcstol
_exit
_cexit
gmtime
atoi
wcsstr
__setusermatherr
__getmainargs
strtoul
wcslen

shlwapi

PathIsUNCW

kernel32

FindClose
VirtualQuery
WaitForMultipleObjects
LoadResource
DefineDosDeviceW
WaitCommEvent
GlobalDeleteAtom
GetFullPathNameA
SearchPathA
GetTempFileNameA
TerminateThread
GlobalMemoryStatusEx
GlobalSize
lstrcpyW
GetProcAddress
VirtualAlloc
GetCurrentDirectoryW
GetCommModemStatus
FileTimeToDosDateTime
GetVersionExW
GetFileSize
FindNextFileA
CopyFileA
LocalFree
TlsGetValue
MapViewOfFile
AddAtomA
LoadLibraryExW
FindFirstChangeNotificationW
GetFileAttributesA
VirtualProtect
GetSystemDirectoryW
GlobalFindAtomW
SystemTimeToFileTime
GlobalAddAtomW
GlobalLock
FindCloseChangeNotification
lstrcpynA
FileTimeToLocalFileTime
IsBadReadPtr
GlobalUnlock
FindResourceExA
GetTickCount
ResetEvent
lstrlenA
RemoveDirectoryA
GetWindowsDirectoryW
GetSystemTimeAdjustment
UnhandledExceptionFilter
HeapWalk
GetTempFileNameW
SetWaitableTimer
CancelIo
GetComputerNameW
ClearCommError

Exports

Exports

?OwnerInitDescriptor@@YGK_KK:O

Sections

.itext
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ips1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips2
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ntrs
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ips3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mode
Size: - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb7589c6db4c866f2e857e6e407389c2

Headers

File Characteristics

PDB Paths

Imports

user32

msvcrt

shlwapi

kernel32

Exports

Exports

Sections

.itext Size: 21KB - Virtual size: 21KB

.ips1 Size: 6KB - Virtual size: 5KB

.ips2 Size: 512B - Virtual size: 89B

.ntrs Size: 512B - Virtual size: 342B

.ips3 Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 2KB

.mode Size: - Virtual size: 183KB

.rsrc Size: 145KB - Virtual size: 144KB

.reloc Size: 2KB - Virtual size: 1KB

.itext
Size: 21KB - Virtual size: 21KB

.ips1
Size: 6KB - Virtual size: 5KB

.ips2
Size: 512B - Virtual size: 89B

.ntrs
Size: 512B - Virtual size: 342B

.ips3
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 2KB

.mode
Size: - Virtual size: 183KB

.rsrc
Size: 145KB - Virtual size: 144KB

.reloc
Size: 2KB - Virtual size: 1KB