6f4dea1fe0346fbdad333a758ed88501_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f4dea1fe0346fbdad333a758ed88501_JaffaCakes118
Size

741KB
MD5

6f4dea1fe0346fbdad333a758ed88501
SHA1

9667dc14f42928072c4cee379a26510611b18de9
SHA256

e0c4f26cb2505f7af7f87fbd9ef706820d847f3fd0eddad686f7eca6693d3dc9
SHA512

24e42b09d4868b883a27e01b3b3d0b5a2ebf4d3582caba384cfbd30e335aec42b4a887262ad7934ff33bce2d25c194c65e79253f762a3685f75ba48d7a1dff7d
SSDEEP

12288:F56TSj9YZQ+ce+ia1XCc6wiSo9ED0zm0xi+np8hZxW5QM6wGEdxlJbX:2OZYG+z/Fbwirq0xi+p80D/bX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f4dea1fe0346fbdad333a758ed88501_JaffaCakes118

Files

6f4dea1fe0346fbdad333a758ed88501_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6783780da5a2653c4f81441d042fd1ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

K:\KZkckuclxN\ifzvDtdblweO\TjkDZvxkfcaji\cjbtild.pdb

Imports

comctl32

ImageList_AddMasked
CreateStatusWindowW
ImageList_GetIcon
ImageList_Destroy
ImageList_Read
CreatePropertySheetPageA

msvcrt

isdigit
strtoul
rand
getc
iswdigit
fputs
sscanf
memset
malloc
clearerr
iswspace
_controlfp
mbtowc
__set_app_type
__p__fmode
strstr
putc
__p__commode
time
strcpy
wcstol
strspn
_amsg_exit
_initterm
towlower
vswprintf
strtol
wcstoul
free
clock
fgetc
_ismbblead
_XcptFilter
_exit
srand
fwrite
wcsstr
_cexit
isxdigit
iswprint
__setusermatherr
getenv
wcscmp
wcslen
fclose
strpbrk
remove
__getmainargs

user32

GetWindowLongA
OpenIcon
GetWindowTextA
ShowCaret
GrayStringW
WaitForInputIdle
LoadImageW
DrawTextW
IsWindowUnicode
CharNextExA
CheckMenuRadioItem
SetDlgItemTextA
DefFrameProcA
GetWindowTextLengthW
FindWindowExA
DestroyMenu
SetFocus
CharLowerW
OemToCharA
CharLowerBuffW
ChangeMenuW
ReplyMessage
GetMenuCheckMarkDimensions
GetWindowPlacement
GetCaretBlinkTime
CreateMenu
UnionRect
MapVirtualKeyW
DragObject
GetDlgItemTextW
GetScrollInfo
CreateWindowExW
DrawIconEx
TranslateAcceleratorW
GetClassInfoA
SendMessageTimeoutW
InsertMenuItemW
FindWindowW
DestroyCaret
LoadAcceleratorsW
CharNextA
DefDlgProcW
HiliteMenuItem
IsWindowVisible
DrawTextExW
IsDialogMessageA
DestroyIcon
MessageBoxExA
DefDlgProcA
DrawStateW
InSendMessage
LoadStringW
ChildWindowFromPoint
CharToOemA
GetSysColorBrush
keybd_event
GetDlgItem
GetMessagePos
LoadIconW
DestroyAcceleratorTable
InvalidateRgn
AttachThreadInput
GetWindowDC
ShowCursor
CreateCaret
GetClientRect
SetRect
GetDlgItemInt
LoadMenuW
GetActiveWindow
DefFrameProcW
GetAltTabInfoA
HideCaret
IsWindowEnabled
GetParent
GetKeyboardLayoutList
LookupIconIdFromDirectory
SetWindowTextW
DeleteMenu
ExitWindowsEx
IsZoomed
AllowSetForegroundWindow
MapWindowPoints
PostThreadMessageW
SetMenuItemBitmaps
DrawStateA
IntersectRect
EndDialog
ValidateRect
InSendMessageEx
LoadAcceleratorsA
SetDlgItemInt
CharLowerA
GetMenuStringA
LoadStringA
InvalidateRect
GetUpdateRgn
DrawAnimatedRects
PostMessageA
MonitorFromPoint
GetSystemMetrics
VkKeyScanW
InternalGetWindowText
IsWindow
LoadBitmapA
CloseDesktop
SetRectEmpty
EnableWindow
GetMessageTime
SetWindowPos
SetLastErrorEx
ClientToScreen
IsDlgButtonChecked
GetWindowRect
GetSysColor
CharToOemBuffA
MapVirtualKeyExW
DispatchMessageW
BeginPaint
CharUpperBuffA

shlwapi

StrToIntA

comdlg32

GetOpenFileNameW
GetOpenFileNameA
PrintDlgW
ChooseColorW

kernel32

GetSystemWindowsDirectoryW
CreateMutexA
CreateEventA
FileTimeToSystemTime
lstrcmpiA
HeapAlloc
GetVersionExA
HeapFree
SetCurrentDirectoryW
GetModuleFileNameA
IsDBCSLeadByteEx
UnmapViewOfFile
GetLocaleInfoA
SetCommState
CallNamedPipeW
GetBinaryTypeW
GetHandleInformation
GlobalFindAtomW
MapViewOfFile
TlsFree
GetFileAttributesW
LCMapStringA
SetPriorityClass
FlushFileBuffers
AreFileApisANSI
LocalUnlock
GetProcessHeap
WaitForSingleObjectEx
LocalSize
GetCommProperties
CompareFileTime
WaitCommEvent
OpenFileMappingW
SystemTimeToFileTime
CreateThread
lstrcatA
SetSystemTimeAdjustment
MoveFileA
FindCloseChangeNotification
GetThreadPriority
lstrcpynW
SearchPathA
InitializeCriticalSection
DeleteAtom
GetDateFormatA
MulDiv
GlobalAddAtomA
WaitForMultipleObjects
FoldStringW
RaiseException
LoadLibraryExW
GlobalMemoryStatus
FindResourceExW
SizeofResource
CompareStringA
LocalFree

Exports

Exports

showtit[D
?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6783780da5a2653c4f81441d042fd1ae

Headers

File Characteristics

PDB Paths

Imports

comctl32

msvcrt

user32

shlwapi

comdlg32

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 1.3MB

.rsrc Size: 709KB - Virtual size: 709KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 1.3MB

.rsrc
Size: 709KB - Virtual size: 709KB

.reloc
Size: 1KB - Virtual size: 1KB