674098be49844db05ee1ad1994f1eb4b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

674098be49844db05ee1ad1994f1eb4b_JaffaCakes118
Size

194KB
MD5

674098be49844db05ee1ad1994f1eb4b
SHA1

69db8d72b59fb8e6086847b58fd2d94171cf30c5
SHA256

08c1b5c8cd0df7f9225d856f78178374536ac824982ba0296c058e75ac5ce1a5
SHA512

b9a680b802603eda765dac88067e554e708527523fbfeee4a58ce660823e1fa95e7083f10084eaefa1f3b4e7b9189efc05fbf45451d8094c4e556ec9d91378e5
SSDEEP

3072:skOfjLLvxzedQn5QmWID783VhinKjk/FfANtjU19QaUafkevvH:ROfjLLZzgQ5LWIkTdklAvja9QaUIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674098be49844db05ee1ad1994f1eb4b_JaffaCakes118

Files

674098be49844db05ee1ad1994f1eb4b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5c62f36bbe205a380f8f4317df1d294d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\mzquvgoyEef\xxrocknpxapTk\lvHhvHRsgjqhvF\vtlgrPngmJuEvH\ZfoiVdbojce.pdb

Imports

gdi32

DPtoLP
RealizePalette
CreatePalette
CreatePen
SetBitmapBits
PathToRegion
Polyline
RoundRect
SelectClipRgn
GetObjectW
StartPage
CreateBitmapIndirect
SetWindowOrgEx
GetClipBox
GetTextCharsetInfo
OffsetRgn
ResizePalette
PatBlt
SetBitmapDimensionEx
StartDocW
DeleteObject
GetRgnBox
PtVisible
MoveToEx
GetObjectA
CreateBrushIndirect
GetWindowOrgEx
RectVisible
Polygon
ScaleViewportExtEx
CreatePatternBrush
Ellipse
GetDIBColorTable
FillRgn
SelectPalette
CreateFontIndirectW
SetWindowExtEx
CreateICW
GetBkMode
TextOutA
GetTextAlign
CreateFontIndirectA
ExtTextOutW
GetStockObject
ExtTextOutA
EndPath
SetBrushOrgEx
SetROP2
SetBkColor
StretchBlt
ScaleWindowExtEx
BitBlt
GetTextExtentPoint32A
GetDIBits
PtInRegion
SetStretchBltMode
SetLayout
CreateHatchBrush
ExcludeClipRect
TranslateCharsetInfo
GetCurrentObject
SetTextAlign
GetTextExtentPointA
GetViewportOrgEx
CreateBitmap

user32

CopyImage
EndTask
keybd_event
LoadCursorW
SetMenuItemBitmaps
DialogBoxIndirectParamW
FindWindowExA
SetForegroundWindow
CheckRadioButton
GetNextDlgGroupItem
FillRect
PeekMessageA
CreateWindowExW
IsWindowUnicode
InSendMessageEx
InsertMenuA
CopyAcceleratorTableW
MapVirtualKeyA
TileWindows
SetDlgItemInt
SetPropW
SetDlgItemTextW
CharToOemA
OpenIcon
DestroyCaret
DefWindowProcW
IsMenu
InternalGetWindowText
IsDlgButtonChecked
MessageBoxW
EnumThreadWindows
InvalidateRect
DestroyAcceleratorTable
GetCursorPos
LoadImageW
GetKeyboardType
GetDC
DrawFrameControl
AdjustWindowRect
CheckDlgButton
GetMenuStringW
ShowCursor
TrackPopupMenu
ScrollWindow
CloseDesktop
CharToOemBuffA
SendMessageTimeoutA
GetScrollPos
GetUserObjectInformationA
GetCaretPos
CharLowerBuffW
IsCharUpperA
GetDlgItemTextW
ArrangeIconicWindows
DrawStateW
VkKeyScanW
DestroyMenu
UnionRect
DispatchMessageA
CreateCursor
GetLastActivePopup
CreateIconIndirect
GetKeyboardLayoutList
ActivateKeyboardLayout
CreateWindowExA
RegisterClassExA
DrawTextExW
GetMenuItemInfoW
FindWindowW
GetTopWindow
SetActiveWindow
DeferWindowPos
DefFrameProcA
EnableScrollBar
FindWindowA
SetWindowRgn
GetMenuItemRect
CreateDialogIndirectParamW
CallWindowProcA
DrawMenuBar
SetCursor
IntersectRect
PostThreadMessageA
GetWindowTextA
TranslateAcceleratorA
GetDlgCtrlID
GetMessageA
SetTimer
SetWindowLongA
BeginPaint
LoadMenuA
SetMenuDefaultItem
GetWindowTextW
wvsprintfW
RemoveMenu
GetWindow
RegisterWindowMessageW
GetMenuItemID
RegisterClassExW
DefFrameProcW
EnableMenuItem
SetWindowLongW
GetKeyState
UpdateWindow
GetMessageTime
GetDoubleClickTime
ShowWindow
ReleaseDC
GetMessageW
GetFocus
GetWindowLongA
SetWindowPlacement
PtInRect
DispatchMessageW
ClipCursor
LoadStringW
SetWindowTextA
DialogBoxParamA
PostQuitMessage
GetAsyncKeyState
CheckMenuItem
GetIconInfo
GetDCEx
DialogBoxParamW
OpenInputDesktop
GetScrollInfo
SetRectEmpty
PeekMessageW
GetSystemMetrics
SystemParametersInfoW
DefWindowProcA
EqualRect
LoadAcceleratorsA
ChangeMenuW
MapVirtualKeyW
SwapMouseButton
DrawEdge
LoadIconA
CharPrevW
DrawTextA
LoadMenuW
GetClientRect
BringWindowToTop
GetDesktopWindow
ClientToScreen
WaitForInputIdle
CharNextExA
SetRect
MonitorFromPoint
SetScrollRange
PostMessageA
ShowOwnedPopups
MessageBoxExA
LoadImageA
OffsetRect
GetWindowDC
MonitorFromRect
LoadCursorA
WaitMessage
OemToCharA

msvcrt

printf
wcscat
_controlfp
isalpha
towupper
mktime
strtol
isxdigit
bsearch
strcpy
clock
__set_app_type
calloc
iswprint
mbstowcs
__p__fmode
wcscmp
system
wcstod
strpbrk
__p__commode
iswalpha
isspace
fseek
_amsg_exit
fread
_initterm
_ismbblead
wcsrchr
strspn
srand
gets
_XcptFilter
clearerr
time
putchar
wcstombs
toupper
_exit
strcspn
iswctype
iswxdigit
isprint
wcschr
exit
realloc
_cexit
iswdigit
__setusermatherr
wcspbrk
__getmainargs
setlocale
strncpy
iswspace
ftell
strchr
qsort
sprintf
fgetc
towlower

kernel32

lstrcmpiW
MoveFileA
GetSystemDefaultLangID
GlobalGetAtomNameA
EnumResourceTypesA
GetSystemDirectoryW
GetLastError
FindClose
SetupComm
GetComputerNameA
UnlockFile
SetFileAttributesA
GlobalAlloc
SetHandleCount
CancelIo
LocalLock
GetDateFormatW
EnumResourceNamesW
GlobalFindAtomW
GetLocaleInfoA
GetThreadContext
SetCommState
CompareStringW
OpenEventA
RtlUnwind
AddAtomA
MulDiv
GetLongPathNameW
FindResourceExA
FindFirstChangeNotificationW
WriteFile
LoadLibraryA
FileTimeToLocalFileTime
SystemTimeToFileTime
lstrcpynW
DeleteFileA
GetModuleHandleA
OpenFileMappingW
HeapReAlloc
GetCPInfo
WaitCommEvent
LoadLibraryExA
GetSystemDirectoryA
SetThreadAffinityMask
GetNumberFormatA
GetExitCodeThread
ReadFile
SetThreadPriority
GetSystemTimeAsFileTime
GetHandleInformation
GetModuleFileNameA
SetThreadLocale
Sleep
GetBinaryTypeA
SetEndOfFile
MoveFileW
CreateSemaphoreA
SetLocalTime
TransactNamedPipe
FreeResource
GlobalAddAtomW
GlobalAddAtomA
GetUserDefaultLCID
lstrcpyA
WaitForSingleObjectEx
TlsGetValue
LockFile
IsDBCSLeadByteEx
SetUnhandledExceptionFilter
AreFileApisANSI
GetVersion
ConvertDefaultLocale
lstrcmpW
EnumResourceLanguagesA

comctl32

ImageList_AddMasked
ImageList_Draw
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_Read
ImageList_Write
PropertySheetA
ImageList_Create
ImageList_Remove

Exports

Exports

?GetTimeW@@IJJPAKF@X

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tmp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dust
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ins
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c62f36bbe205a380f8f4317df1d294d

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

msvcrt

kernel32

comctl32

Exports

Exports

Sections

.text Size: 94KB - Virtual size: 93KB

.tmp Size: 1KB - Virtual size: 1KB

.wdata Size: 8KB - Virtual size: 7KB

.edata Size: 512B - Virtual size: 93B

.dust Size: 512B - Virtual size: 28B

.data Size: 2KB - Virtual size: 1KB

.ins Size: - Virtual size: 39KB

.rsrc Size: 84KB - Virtual size: 83KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 94KB - Virtual size: 93KB

.tmp
Size: 1KB - Virtual size: 1KB

.wdata
Size: 8KB - Virtual size: 7KB

.edata
Size: 512B - Virtual size: 93B

.dust
Size: 512B - Virtual size: 28B

.data
Size: 2KB - Virtual size: 1KB

.ins
Size: - Virtual size: 39KB

.rsrc
Size: 84KB - Virtual size: 83KB

.reloc
Size: 2KB - Virtual size: 2KB