5db996102b2d1f78a31c71c2db39849f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5db996102b2d1f78a31c71c2db39849f_JaffaCakes118
Size

140KB
MD5

5db996102b2d1f78a31c71c2db39849f
SHA1

b4b7cd751e1c2062c1328d86e4f898a0d4bd68e5
SHA256

c6ec0c97e123690c609f73f556efa50de5c3e735b26f99bc60816936f7b6a462
SHA512

1f3b0047bc889234e641dcbdf146c73f8931d856101c8c318b90a16a3917f2065ad667458685a9b2bba1c0a38c28b2aef4bb8e91a461a6d060ea988c9a26f9c8
SSDEEP

3072:+fLPSv7+y+q9dQx3EsSxmjtTzjB/+fuu0N56N49d0tpnaOzL:m6T+NaIfVV+fuuigi9onaOzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5db996102b2d1f78a31c71c2db39849f_JaffaCakes118

Files

5db996102b2d1f78a31c71c2db39849f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e7ba3d1e877f85e0ab026e3699401657

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\khbcsxhbrQtfYo\rRcdVwbOoZin\kchzzIzghP\avJviQon\hCoOuujEDhou.pdb

Imports

comdlg32

CommDlgExtendedError
GetSaveFileNameA
GetSaveFileNameW
ChooseFontW

gdi32

CreateRectRgn
StretchDIBits
GetMapMode
SetWindowExtEx
SelectClipRgn
GetTextExtentPointA
CreateRoundRectRgn
FillRgn
Rectangle
GetROP2
CreatePenIndirect
GetBkMode
GetCharWidth32W
Escape
ScaleViewportExtEx
TranslateCharsetInfo
SetViewportOrgEx
SetDIBitsToDevice
PathToRegion
GetObjectW
GetTextMetricsA
SetStretchBltMode
CreatePen
SetROP2
SetRectRgn
SetBkColor
GetDIBits
EnumFontFamiliesW
StretchBlt
GetRgnBox
SetAbortProc
PatBlt
CreateFontIndirectW
IntersectClipRect
TextOutW
SelectPalette
RemoveFontResourceW
GetCurrentObject
RectInRegion
PtInRegion
GetBitmapBits
SetViewportExtEx
SetPaletteEntries
GetObjectA
GetTextColor
Polyline
GetSystemPaletteEntries
GetFontData
UnrealizeObject
GetLayout
GetDIBColorTable

user32

SetWindowRgn
IsCharLowerA
GetMenuCheckMarkDimensions
CreateWindowExA
IsDialogMessageA
ClipCursor
SetPropW
CloseDesktop
GetUpdateRgn
GetKeyboardLayout
BeginDeferWindowPos
CheckMenuItem
CharNextW
InvertRect
RegisterHotKey
GrayStringW
GetDlgCtrlID
EnableMenuItem
DialogBoxParamW
TranslateMessage
GetKeyboardLayoutList
CreateIconFromResource
TranslateAcceleratorA
RegisterClassA
InflateRect
SetWindowTextW
EnumThreadWindows
UnionRect
GetClassInfoW
MonitorFromPoint
GetKeyboardLayoutNameW
IsChild
SetSysColors
LoadBitmapW
IsZoomed
SetCaretPos
RegisterWindowMessageW
CheckDlgButton
DestroyAcceleratorTable
CreateAcceleratorTableW
SetWindowPlacement
PostMessageA
EndDialog
GetMonitorInfoW
ShowCaret
keybd_event
IsRectEmpty
GetWindowLongW
LoadIconA
MessageBoxExA
DrawStateA
SetDlgItemTextW
CharUpperBuffA
LoadIconW
LookupIconIdFromDirectory
GetDCEx
TrackPopupMenuEx
GetMenuItemCount
IsWindowVisible
IsWindowEnabled
SystemParametersInfoA
GetWindow
SetDlgItemInt
SetWindowPos
RegisterWindowMessageA
CharToOemW
GetLastActivePopup
CharUpperW
LoadBitmapA
FrameRect
DialogBoxIndirectParamW
GetPropW
GetFocus
IsWindowUnicode
GetNextDlgTabItem
mouse_event
DefWindowProcW
SendDlgItemMessageW
CreateCaret
LoadStringA
wvsprintfA
SetCursorPos
DispatchMessageW
GetAltTabInfoW
GetMessagePos
MapVirtualKeyA
IsCharAlphaW
SetCursor
GetUserObjectInformationW
DeferWindowPos
GetScrollPos
WaitMessage
OpenDesktopW
GetTopWindow
GetSubMenu
GetDlgItem
LoadCursorW
ScrollWindowEx
OpenInputDesktop
CreateWindowExW
wsprintfA
GetForegroundWindow
GetMenu
CheckRadioButton
ScreenToClient
ChangeMenuW
GetClassLongW
GetDlgItemInt
DrawFrameControl
CharLowerW
SendInput
LoadStringW
CallWindowProcA
CreateIconIndirect
IsWindow
GetUpdateRect
GetShellWindow
DeleteMenu
MapDialogRect
UnloadKeyboardLayout
EndPaint

kernel32

GetNumberFormatA
CreateFileW
GetSystemDefaultUILanguage
HeapCreate
GetComputerNameA
VirtualProtect
GetFileInformationByHandle
GetSystemDirectoryA
TlsGetValue
SearchPathW
RemoveDirectoryA
LoadLibraryW
GetCurrentThread
GetLastError
FindFirstChangeNotificationW
CreateNamedPipeA
DeviceIoControl
MapViewOfFile
GetSystemDirectoryW
SetTimerQueueTimer
SetFileAttributesA
OpenFileMappingA
FindFirstFileA
lstrcmpA
IsValidLanguageGroup
GetCommandLineW
CompareStringW
SuspendThread
GetThreadTimes
IsValidLocale
CancelIo
GetLongPathNameW
GetShortPathNameA
TryEnterCriticalSection
CreateFileMappingW
FreeResource
GetFileAttributesExA
ConvertDefaultLocale
FreeLibrary
GetLocaleInfoA
TlsFree
GetComputerNameW
ResumeThread
OpenSemaphoreW
FileTimeToDosDateTime
ReadFile
MoveFileA
GetLocalTime
AddAtomW
GetModuleFileNameW
GetUserDefaultUILanguage
GetSystemTimeAsFileTime
SearchPathA
LoadLibraryA
AreFileApisANSI
WaitForSingleObject

msvcrt

strstr
isdigit
mktime
clearerr
fread
bsearch
wcstombs
isxdigit
strtol
wcschr
strncpy
_controlfp
wcsncmp
vswprintf
__set_app_type
__p__fmode
ftell
strcspn
strncmp
gmtime
printf
__p__commode
_amsg_exit
fgets
_initterm
_acmdln
exit
fclose
_ismbblead
_XcptFilter
strspn
tolower
perror
_exit
free
isspace
fputc
wcscoll
toupper
wcstoul
_cexit
floor
putc
__setusermatherr
wcsrchr
qsort
__getmainargs
isupper

Exports

Exports

?BitCounterArrayIdeDunAs@@YGKGE@Z

Sections

.text
Size: 9KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e7ba3d1e877f85e0ab026e3699401657

Headers

File Characteristics

PDB Paths

Imports

comdlg32

gdi32

user32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 133KB

.rsrc Size: 110KB - Virtual size: 110KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 9KB - Virtual size: 133KB

.rsrc
Size: 110KB - Virtual size: 110KB

.reloc
Size: 19KB - Virtual size: 19KB