6988dcea793d41ba00a77d5675a703b8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6988dcea793d41ba00a77d5675a703b8_JaffaCakes118
Size

209KB
MD5

6988dcea793d41ba00a77d5675a703b8
SHA1

97edccf923900d47617b367a926f9c1ccb9a9910
SHA256

6ff7e2e50e953d0bfef07a9e827ae77aea5d7469199a0201baff1b59ba07c79c
SHA512

83b83a40ae2ea26ca54b47ce60050668e7c3877be4b3cda573e56f17d7c551c961afcf7b17e60e9392b9119790131ba3fc7611570dda0e2c7ab14a1b0814f0b8
SSDEEP

6144:7D/eR0r3XtcgPRUQ9rJvY23cu9QadWbSoTfIaakf:veI3nPKQ9rVt9lWFfRPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6988dcea793d41ba00a77d5675a703b8_JaffaCakes118

Files

6988dcea793d41ba00a77d5675a703b8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8665280e25e93c7f34f3e26ec90d943e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\WYjzczkra\vbnlnrZmm\zoijNpOSnh.pdb

Imports

comctl32

ImageList_Destroy
CreatePropertySheetPageW
ImageList_Read
CreateStatusWindowW
ImageList_Create
DestroyPropertySheetPage
ImageList_GetIcon
InitCommonControlsEx
ImageList_AddMasked

user32

CharNextA
GrayStringW
CopyRect
GetKeyState
CharPrevW
GetDlgItem
SendNotifyMessageW
GetDlgItemTextA
GetDesktopWindow
GetLastActivePopup
UnionRect
ModifyMenuW
GetUpdateRect
CreateMenu
OpenDesktopW
SendDlgItemMessageW
LoadIconA
EnumChildWindows
GetWindowTextW
IsWindowVisible
wvsprintfW
GetSysColor
InsertMenuW
MapVirtualKeyExW
wsprintfA
LoadCursorW
SetWindowPlacement
GetKeyboardType
EqualRect
SetDlgItemInt
GetClientRect
TranslateAcceleratorW
CreateDialogParamW
PostQuitMessage
LoadBitmapA
InvertRect
GetCursorPos
SendDlgItemMessageA
ChildWindowFromPoint
DialogBoxIndirectParamW
InsertMenuA
GetSysColorBrush
DrawIconEx
DrawStateW
GetClassLongW
SystemParametersInfoA
InSendMessage
DragObject
PtInRect
DrawTextA
TileWindows
FillRect
GetKeyNameTextW
IsWindow
GetCaretPos
RemovePropW
CharPrevA
DestroyIcon
SendMessageTimeoutW
CopyAcceleratorTableW
SetWindowTextW
AppendMenuA
LoadImageW
InsertMenuItemW
InvalidateRect
TranslateMessage
GetScrollInfo
CopyImage
DispatchMessageA
SetRectEmpty
SetUserObjectInformationW
GetKeyboardLayout
GetScrollRange
CharToOemBuffA
LoadIconW
IsCharUpperA
RegisterClassA
ShowCursor
DestroyCaret
CascadeWindows
IsDialogMessageW
DestroyMenu
ShowWindowAsync
SetForegroundWindow
LoadMenuW
OffsetRect
SetMenuItemBitmaps
OpenInputDesktop
ScreenToClient
LockWindowUpdate
RegisterWindowMessageW
SetMenuItemInfoW
CharUpperBuffA
GetSubMenu
ReplyMessage
GetShellWindow
TrackPopupMenu
AdjustWindowRectEx
GetCaretBlinkTime
MessageBoxA
CreateCaret
GetMenuStringW
SetSysColors
PostMessageW
IntersectRect
IsCharAlphaNumericW
ScrollWindowEx
DrawMenuBar
CheckDlgButton
UpdateWindow
mouse_event
BringWindowToTop
SetRect
DefDlgProcW
PostThreadMessageW
DialogBoxParamA
GetMessageA
DestroyWindow
FindWindowA
SetPropW
ValidateRect
GetClassInfoExW
AppendMenuW
GetMessageTime
RegisterClassW
CreateDialogParamA
LoadStringW
BeginPaint
DrawIcon
DialogBoxIndirectParamA
IsMenu
DrawEdge
SetScrollPos
LoadStringA
LoadAcceleratorsW
MonitorFromPoint
IsWindowEnabled
DrawFocusRect
RegisterClassExA
DefWindowProcW
CheckRadioButton
SetLastErrorEx
CharNextExA
CreatePopupMenu
LoadCursorA
GetMenuItemID
SetScrollInfo
CheckMenuItem
EnableScrollBar
HiliteMenuItem
InSendMessageEx
PeekMessageW
SetParent
SetWindowPos
DefFrameProcA
ChangeMenuW
ShowOwnedPopups
ToUnicodeEx
SetMenu
TranslateAcceleratorA

gdi32

CreateFontIndirectA
SetPixel
CreateBrushIndirect
GetNearestPaletteIndex
CreateHalftonePalette
GetTextExtentPointA
SetDIBits
BeginPath
GetDeviceCaps
SetWindowOrgEx
CreateDiscardableBitmap
MoveToEx
GetTextCharsetInfo
GetMapMode
GetRgnBox
CreateBitmap
TextOutW
CombineRgn
CreatePalette
SetTextAlign
CreateDIBSection
GetLayout
CreateCompatibleDC
GetViewportOrgEx
ExtTextOutW
PathToRegion
CreatePen
FillRgn
SelectPalette
GetBkMode
DeleteDC
EndDoc
UnrealizeObject
RealizePalette
GetTextFaceW
SelectObject
GetSystemPaletteEntries
GetPixel
SetStretchBltMode
RectInRegion
PolyBezier
CreateFontW
GetObjectW
GetROP2
PatBlt
EndPath
CreateDCW
RestoreDC
SetBkMode
StretchBlt
CreateBitmapIndirect
CreateRectRgn
SetPaletteEntries
LineTo
CreateCompatibleBitmap
SetBkColor
Rectangle
ExtFloodFill
SetDIBitsToDevice
SetTextColor
StartPage
SelectClipRgn
CreateEllipticRgnIndirect
Ellipse
CreateFontIndirectW

kernel32

TerminateThread
GetCurrentDirectoryW
IsBadCodePtr
GetModuleHandleA
FindFirstFileW
SetCurrentDirectoryA
CompareFileTime
VirtualAlloc
GetTickCount
VirtualProtect
SleepEx
FreeLibrary
CreateFileA
GetShortPathNameA
GetFileTime
GetSystemWindowsDirectoryW
HeapSize
GetTimeZoneInformation
GetModuleFileNameA
GetPriorityClass
VirtualFree
SetFileApisToOEM
OpenEventW
ReadFile
lstrcpyA
OpenFile
GetSystemTimeAsFileTime
GlobalHandle
IsDBCSLeadByte
CancelIo
GetSystemDirectoryA
SetEvent
IsBadWritePtr
lstrcmpiW
CopyFileW
GetBinaryTypeW
RaiseException
FindCloseChangeNotification
VerifyVersionInfoW
SetCommBreak
DefineDosDeviceW
FoldStringW
GlobalFindAtomW
GlobalFlags
SetThreadAffinityMask
LoadLibraryW
SetHandleInformation
GetWindowsDirectoryA
GlobalCompact
SetHandleCount
GetLocalTime
SearchPathA
GetAtomNameW
GetStartupInfoW
FileTimeToLocalFileTime
CreateRemoteThread
MapViewOfFile
GetFileAttributesA
CreateNamedPipeW
IsBadStringPtrW
IsValidLanguageGroup
GetDateFormatW
GetCurrentThreadId
CreateNamedPipeA
HeapFree
RegisterWaitForSingleObject
GetBinaryTypeA
WaitForMultipleObjectsEx
GetWindowsDirectoryW
CreateFileMappingW
EnterCriticalSection
GetCPInfo
GetACP
GetThreadPriority
HeapAlloc

shlwapi

ChrCmpIA

msvcrt

_controlfp
system
sscanf
fflush
clock
__set_app_type
__p__fmode
fputc
wcstod
calloc
fwrite
printf
__p__commode
vswprintf
ftell
_amsg_exit
tolower
free
fputs
swscanf
setvbuf
_initterm
putc
isupper
iswprint
atol
memset
strcspn
strncpy
ungetc
bsearch
_ismbblead
wcspbrk
_XcptFilter
strchr
putchar
towupper
fgetc
wcsstr
fread
wcscat
_exit
toupper
localtime
wcstombs
wcsncpy
_cexit
iswctype
fclose
iswalpha
strpbrk
time
__setusermatherr
iswspace
__getmainargs
isalnum
mktime
gmtime
wcstol
strerror

Exports

Exports

?DecrementFunctionW@@IJNKPAEM@X
?RtlListItem@@IJPADFI@X
?GenerateTimer@@IJFFID@X
?HideKeyboardEx@@IJMPAF@X

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8665280e25e93c7f34f3e26ec90d943e

Headers

File Characteristics

PDB Paths

Imports

comctl32

user32

gdi32

kernel32

shlwapi

msvcrt

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.code Size: 12KB - Virtual size: 12KB

.data Size: 11KB - Virtual size: 68KB

.rsrc Size: 113KB - Virtual size: 113KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 69KB - Virtual size: 68KB

.code
Size: 12KB - Virtual size: 12KB

.data
Size: 11KB - Virtual size: 68KB

.rsrc
Size: 113KB - Virtual size: 113KB

.reloc
Size: 2KB - Virtual size: 1KB