603c3e1089ea47395d35c08968b41122_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

603c3e1089ea47395d35c08968b41122_JaffaCakes118
Size

151KB
MD5

603c3e1089ea47395d35c08968b41122
SHA1

379c8a8a8e4c696bb21a1686b8bb002adadf7746
SHA256

dd15a9894f2f011598037b9aaa06eb7b81202cdfbbfdf2b540b72c4b28f62aaf
SHA512

e271087c6f051440d09dbb4d5c1424cf9d9a53c1041e9384608e6b113f980879bcdc3dc7c1f7d59bc74a0e02fca5b2543a58252edb3b0769f9cae75a4707a93a
SSDEEP

3072:WCfmZMrUgUvuhynzSzMzarTw1AzLBVvV8l0z+RjcPe0QFH:zfmZMT4yM0wa/tn6cPe0Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603c3e1089ea47395d35c08968b41122_JaffaCakes118

Files

603c3e1089ea47395d35c08968b41122_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c4065c754a8993af9bb3a4114264b9ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\yuwVobFg\notygLqlycy\sPgatlXKy\BowmxAky.pdb

Imports

comdlg32

GetSaveFileNameW
PrintDlgW
FindTextW
PageSetupDlgW
GetOpenFileNameA

shlwapi

PathIsUNCA

user32

GetWindowLongA
GetNextDlgGroupItem
wvsprintfA
GetMessageTime
LoadCursorA
MessageBoxW
GetDoubleClickTime
PostQuitMessage
TranslateAcceleratorW
TranslateMessage
PostMessageW
wvsprintfW
GetSysColor
TrackPopupMenu
EnumWindows
ModifyMenuW
CheckRadioButton
CharUpperBuffW
HiliteMenuItem
AttachThreadInput
InflateRect
GetClassInfoW
SendMessageTimeoutW
GetClassInfoExW
IsZoomed
GetMenuItemCount
IsDialogMessageW
PeekMessageA
RegisterWindowMessageW
PostMessageA
GetMenuItemInfoW
TileWindows
FrameRect
GetClassLongW
CreateIconIndirect
ActivateKeyboardLayout
FindWindowA
OpenIcon
DestroyIcon
SetDlgItemInt
ScrollWindowEx
RemovePropW
IsWindowUnicode
GetClassNameW
DrawIcon
SetWindowTextW
CopyImage
SendMessageA
RedrawWindow
RegisterClassA
DefFrameProcA
DrawMenuBar
GetMessageW
KillTimer
SetSysColors
DrawStateW
ValidateRect
EnableMenuItem
DrawIconEx
CallWindowProcW
IsRectEmpty
UnionRect
GetScrollRange
GetLastActivePopup
LoadAcceleratorsA
LoadMenuW
CreateMenu
SendInput
SetDlgItemTextW
LockWindowUpdate
OffsetRect
CharPrevA
DestroyAcceleratorTable
CopyRect
GetWindowLongW
GetForegroundWindow
MonitorFromRect
AdjustWindowRectEx
InvalidateRgn
CharLowerA
WaitMessage
SetWindowRgn
DrawTextA
GetUserObjectInformationA
TranslateAcceleratorA
RegisterHotKey
MapVirtualKeyW
DrawFrameControl
GetPropW
ShowOwnedPopups
SetParent
CheckMenuRadioItem
GetMenuCheckMarkDimensions
GetMessageA
TabbedTextOutW
InvertRect
FindWindowExW
GetMenuItemRect
SetCursor
CreateDialogParamA
RegisterClassExA
GetWindowTextLengthW
GetMessagePos
ChildWindowFromPoint
DrawTextExW
EnableWindow
MapWindowPoints
SystemParametersInfoA
GetAsyncKeyState
SetRectEmpty
ShowCursor
GetMenu
GetWindowRect
IsCharLowerA
SetWindowLongW
DefDlgProcA
CharToOemW
UpdateWindow
DrawStateA

msvcrt

iswxdigit
_controlfp
__set_app_type
strcoll
getc
wcstol
__p__fmode
wcsstr
clock
free
__p__commode
iswspace
fputc
fputs
_amsg_exit
strncmp
isdigit
strtoul
wcscoll
_initterm
bsearch
malloc
fflush
time
atol
_ismbblead
getenv
wcstombs
_XcptFilter
_exit
mktime
wcsncpy
memset
islower
realloc
fgetc
strstr
_cexit
isspace
__setusermatherr
calloc
fwrite
__getmainargs
wcstod
iswctype
qsort
gmtime
srand

kernel32

IsDBCSLeadByte
GetLocalTime
GetStartupInfoA
SetThreadAffinityMask
HeapSize
SetHandleCount
SetLocalTime
ClearCommBreak
GlobalSize
SetMailslotInfo
LocalLock
EnumResourceNamesW
GlobalAddAtomW
CopyFileA
IsBadStringPtrW
GetStringTypeExW
TlsFree
RegisterWaitForSingleObject
GetWindowsDirectoryW
GetDateFormatW
RaiseException
GetSystemDefaultUILanguage
VirtualAlloc
GetTempFileNameW
SetCommState
GetBinaryTypeA
GlobalFlags
Sleep
OpenFileMappingW
GetUserDefaultLCID
lstrcpyA
FormatMessageA
HeapFree
OpenEventW
SearchPathW
LocalFree
EnumSystemLocalesA
MulDiv
CreatePipe
GetThreadContext
LocalUnlock
UnmapViewOfFile
GlobalCompact
GetCurrentDirectoryW
HeapAlloc
FlushFileBuffers
GetFileType
GetCommState
DeleteAtom
lstrcmpA
GetComputerNameA
MoveFileW

comctl32

ImageList_ReplaceIcon
CreateToolbarEx
ImageList_Remove
ImageList_LoadImageW
ImageList_Write
ImageList_Create

Exports

Exports

?ForwardControlItem@@YGK_KK:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ips1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips2
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.read
Size: 512B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ips3
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips4
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4065c754a8993af9bb3a4114264b9ef

Headers

File Characteristics

PDB Paths

Imports

comdlg32

shlwapi

user32

msvcrt

kernel32

comctl32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.ips1 Size: 6KB - Virtual size: 5KB

.ips2 Size: 512B - Virtual size: 88B

.read Size: 512B - Virtual size: 124KB

.ips3 Size: 1024B - Virtual size: 704B

.data Size: 3KB - Virtual size: 2KB

.ips4 Size: 31KB - Virtual size: 31KB

.rsrc Size: 83KB - Virtual size: 83KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 21KB

.ips1
Size: 6KB - Virtual size: 5KB

.ips2
Size: 512B - Virtual size: 88B

.read
Size: 512B - Virtual size: 124KB

.ips3
Size: 1024B - Virtual size: 704B

.data
Size: 3KB - Virtual size: 2KB

.ips4
Size: 31KB - Virtual size: 31KB

.rsrc
Size: 83KB - Virtual size: 83KB

.reloc
Size: 2KB - Virtual size: 1KB