76111ae97adafa5e69a6fee3e1cb8a2b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

76111ae97adafa5e69a6fee3e1cb8a2b_JaffaCakes118
Size

149KB
MD5

76111ae97adafa5e69a6fee3e1cb8a2b
SHA1

2a38dd430b41f160f505fa51e630f005d28e157d
SHA256

4638d71b6319769a4122776502dae41d5485fcd359df804819bd0db68ddbfe53
SHA512

3376463145fef1ccf409d82c10ea7aea5de329cf9de2ff72502975cddb325322ac11ecf6482a50c1e77d32270faf09549e42887fd5b7de8067ed7bd506dd1669
SSDEEP

3072:JrpUANYM5/yi7HL3euJBNhZq7e+ldkgA2RMWNP1txcHBMKL8xorkir:BpUANkkrOuJBNDf+ldE2mWBfUBUuwi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76111ae97adafa5e69a6fee3e1cb8a2b_JaffaCakes118

Files

76111ae97adafa5e69a6fee3e1cb8a2b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4aeef278150a8a93bff2bde077702090

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\rgqNguktBlufid\tdgcHjleYxyCn\zpOwAICt.pdb

Imports

shlwapi

StrToIntW

user32

GetPropW
GetMenuItemID
GetWindowLongA
SetParent
PeekMessageA
GetMenuStringA
LoadImageW
PostThreadMessageA
GetSysColorBrush
GetScrollPos
DrawFocusRect
OpenDesktopW
DrawStateW
CharLowerA
EnableScrollBar
TrackPopupMenuEx
IsCharAlphaW
CharLowerBuffW
GetClassInfoExW
GetMessagePos
RegisterHotKey
GetClassInfoExA
SetMenuItemInfoW
GetTopWindow
GetForegroundWindow
InSendMessageEx
DefWindowProcW
CharUpperA
SetWindowPos
EnumChildWindows
IsDialogMessageW
MapVirtualKeyA
SetWindowRgn
LoadMenuW
DrawAnimatedRects
wsprintfA
BeginDeferWindowPos
SetMenuItemBitmaps
IsRectEmpty
EnableMenuItem
CharLowerW
SendMessageTimeoutW
ShowWindow
wsprintfW
IsWindowVisible
keybd_event
DestroyCursor
InternalGetWindowText
GetDlgCtrlID
RegisterWindowMessageW
GetDlgItemTextA
CharUpperBuffA
MapDialogRect
DrawIcon
SendInput
RegisterWindowMessageA
CreateDialogParamW
SetWindowTextW
LockWindowUpdate
OemToCharA
SetWindowLongA
DispatchMessageA
KillTimer
SystemParametersInfoW
GetWindowModuleFileNameW
CopyAcceleratorTableW
CopyRect
SetDlgItemInt
InflateRect
DestroyIcon
DrawStateA
GetClassInfoA
GetKeyboardLayoutList
AdjustWindowRectEx
CreateAcceleratorTableW
DrawTextA
ClipCursor
ClientToScreen
WindowFromPoint
ArrangeIconicWindows
SetWindowLongW
CharNextExA
GetUpdateRect
GetMenuStringW
GetMessageA
GetCaretBlinkTime
OpenInputDesktop
SetTimer
GetKeyboardLayoutNameW
GetFocus
GetWindowLongW
ScreenToClient
CheckMenuItem
LoadStringW
DefDlgProcW
IsCharUpperA
GetGUIThreadInfo
TranslateMessage
GetKeyboardLayout
GetScrollInfo
GetScrollRange
GetMenuItemInfoW
GetDialogBaseUnits
LoadBitmapW
OemToCharBuffA
GetKeyNameTextW
SetFocus
VkKeyScanW
SetScrollInfo
DestroyWindow
IsMenu
LoadMenuA
InvalidateRgn
wvsprintfW
GetWindowPlacement
GetDC
GetClassLongA
GetDCEx
RegisterClassW
ShowOwnedPopups
SetScrollRange
GetClassLongW
CharPrevW

msvcrt

gmtime
wcstod
time
memset
fputs
isprint
fclose
wcsncmp
wcstol
_controlfp
wcscspn
__set_app_type
wcslen
__p__fmode
__p__commode
strcoll
system
_amsg_exit
fgetc
free
puts
strtol
isspace
iswspace
_initterm
localtime
iswxdigit
_ismbblead
strchr
wcscpy
mktime
fseek
ftell
wcscmp
wcsncpy
remove
_XcptFilter
isdigit
_exit
_cexit
malloc
strspn
wcstok
strcpy
iswdigit
towupper
__setusermatherr
__getmainargs

kernel32

GetStartupInfoA
CreateRemoteThread
RegisterWaitForSingleObject
DeleteFileW
HeapAlloc
LoadLibraryW
FindFirstChangeNotificationW
GetSystemTimeAsFileTime
VirtualFree
FileTimeToDosDateTime
GetThreadContext
lstrcatW
GetShortPathNameW
SetFilePointer
VerifyVersionInfoW
SetCommMask
VirtualAlloc
CreateThread
SetCommBreak
GetModuleHandleA
GetCompressedFileSizeW
SetThreadAffinityMask
GlobalReAlloc
DeleteFileA
GlobalMemoryStatusEx
GetProcessHeap
lstrlenA
MoveFileW
AddAtomW
ClearCommBreak
GetCurrentThreadId
GetThreadLocale
GetCommandLineW
LoadLibraryExW
GlobalLock
SetErrorMode
SetThreadContext
GetCurrentDirectoryW
SystemTimeToFileTime
GetAtomNameA
GetModuleHandleW
FreeLibrary
GetUserDefaultUILanguage
GetModuleFileNameW
VirtualQuery
WaitForSingleObjectEx
LocalFree
GetLastError
IsBadReadPtr
DisconnectNamedPipe
lstrcmpiA
SetFileTime
CompareStringW
ResumeThread
GetSystemDirectoryW
HeapFree
GlobalFindAtomW
IsDBCSLeadByte
SetFileApisToOEM

comctl32

InitCommonControlsEx
CreatePropertySheetPageA
PropertySheetA
ImageList_Remove
CreateToolbarEx
ImageList_LoadImageW

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4aeef278150a8a93bff2bde077702090

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

msvcrt

kernel32

comctl32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 69KB

.data Size: 15KB - Virtual size: 78KB

.rsrc Size: 61KB - Virtual size: 61KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 69KB - Virtual size: 69KB

.data
Size: 15KB - Virtual size: 78KB

.rsrc
Size: 61KB - Virtual size: 61KB

.reloc
Size: 2KB - Virtual size: 1KB