74839ef278f10dee8369c32d7d6982df_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74839ef278f10dee8369c32d7d6982df_JaffaCakes118
Size

221KB
MD5

74839ef278f10dee8369c32d7d6982df
SHA1

e196bc91535347d74f28e43e034ea163be15c974
SHA256

cab1fae8c6ccc0ba9b41b31b098126419c83d57d46d47f12f89c9456833c9f9e
SHA512

001de5c0dee9c5569b5adb3b42a270fcc7be63f18accae02af0324c41c685ef24d24a00c8312fa41a88985ecf8f8641eeef9d0152593015e74214658fc31e2dd
SSDEEP

6144:b0q1VWyCS/C9NO9qrja3R4IG2/vyAuBx+i9KHLk7O:b0qHCSq9636Ib3uIHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74839ef278f10dee8369c32d7d6982df_JaffaCakes118

Files

74839ef278f10dee8369c32d7d6982df_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e4efacac464afbff03f13b8caa67a6e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\iymePBm\YmjmcgglqF\lDxkLawcBrql\ygMeBqkYiiDvG\Osvwnvv.pdb

Imports

comdlg32

ChooseColorW
GetFileTitleW
GetOpenFileNameA
GetSaveFileNameW

kernel32

TlsGetValue
GetSystemTimeAdjustment
GetSystemDefaultLangID
UnlockFile
WaitForMultipleObjectsEx
RtlUnwind
GetCurrentProcessId
LoadLibraryA
GlobalUnlock
TryEnterCriticalSection
ReleaseMutex
SetFileAttributesW
ReadConsoleInputW
DisconnectNamedPipe
DuplicateHandle
GetCommState
SetCurrentDirectoryA
CreateSemaphoreW
GetCommandLineW
CreateEventW
GetTempPathA
GlobalFindAtomW
DeleteFileW
FindResourceExA
GetPriorityClass
LockFile
FindFirstChangeNotificationW
UnhandledExceptionFilter
GlobalAddAtomW
GetSystemInfo
GetTempFileNameW
SetNamedPipeHandleState
SetSystemTimeAdjustment
lstrcmpiW
WaitCommEvent
SearchPathW
IsValidLocale
lstrcmpW
WinExec
LocalFree
GetExitCodeProcess
OpenProcess
CompareFileTime
GetDateFormatW
GlobalFlags
lstrcmpiA
EnumResourceNamesW
GetCurrentThreadId
GetStartupInfoW
FindNextFileW
MulDiv
FileTimeToLocalFileTime
ConvertDefaultLocale
CreateRemoteThread
SetThreadContext

user32

SetCaretPos
InternalGetWindowText
wvsprintfW
DestroyWindow
PtInRect
InvalidateRgn
GetKeyboardLayoutList
SetActiveWindow
HiliteMenuItem
CopyRect
ShowWindowAsync
IsWindow
ValidateRect
GetClassInfoW
CloseDesktop
WaitForInputIdle
BeginPaint
CharUpperA
LoadIconW
RegisterHotKey
SetUserObjectInformationW
GetClassInfoExA
AllowSetForegroundWindow
CharToOemA
CharLowerW
IntersectRect
ShowWindow
DefWindowProcW
IsChild
ActivateKeyboardLayout
CreateDialogIndirectParamW
GrayStringW
SetWindowPlacement
SetMenu
GetCaretPos
LoadStringA
ArrangeIconicWindows
LoadBitmapW
HideCaret
DrawTextW
GetSubMenu
GetKeyboardType
SendMessageTimeoutW
LoadImageW
MapWindowPoints
SwitchToThisWindow
EqualRect
CreateMenu
GetMenuItemID
GetWindowLongW
SetWindowTextW
GetScrollRange
InvertRect
PeekMessageW
SendMessageTimeoutA
IsWindowVisible
TranslateMessage
InsertMenuItemW
EndDialog
UnloadKeyboardLayout
MessageBoxExW
PeekMessageA
FrameRect
AppendMenuW
DrawIconEx
CharUpperBuffA
CreateWindowExA
IsCharUpperA
LoadAcceleratorsA
InsertMenuW
wvsprintfA
MessageBoxA
WindowFromPoint
SetDlgItemTextA
FillRect
InvalidateRect
GetFocus
GetKeyNameTextW
DeleteMenu
IsCharAlphaW
GetMenuCheckMarkDimensions
SetForegroundWindow
IsCharAlphaNumericW
MapVirtualKeyExW
GetMenu
GetDlgItemInt
DrawMenuBar
FindWindowExA
SendDlgItemMessageA
TranslateAcceleratorA
TranslateAcceleratorW
CharNextExA
RegisterClassA
GetKeyboardLayout
SetWindowLongA
PostMessageW
GetIconInfo
SetRectEmpty
SetScrollPos
mouse_event
DestroyCaret
GetMessageW
GetUserObjectInformationW
IsDlgButtonChecked
GetScrollPos
DrawTextA
IsIconic
AdjustWindowRect
LoadBitmapA
LoadMenuA
RemoveMenu

msvcrt

_controlfp
remove
setlocale
wcscpy
__set_app_type
__p__fmode
fseek
strncpy
wcsstr
system
__p__commode
iswxdigit
_amsg_exit
wcscmp
wcstod
mktime
wcstombs
wcsncmp
puts
_initterm
vswprintf
realloc
ungetc
fwrite
toupper
_acmdln
localtime
strpbrk
exit
strtok
_ismbblead
iswspace
towlower
srand
_XcptFilter
wcscat
_exit
fread
_cexit
__setusermatherr
fgetc
wcsrchr
wcstol
__getmainargs
qsort

gdi32

PtInRegion
RectInRegion
GetTextExtentPoint32W
RemoveFontResourceW
WidenPath
RectVisible
ExtFloodFill
SetLayout
SelectPalette
GetTextColor
GetClipBox
LPtoDP
GetDIBColorTable
GetObjectW
EndPage
GetSystemPaletteEntries
GetLayout
Polygon
MoveToEx
Polyline
OffsetRgn
SelectClipRgn
CreateDIBitmap
CreateSolidBrush
GetDIBits
SetWindowExtEx
CreateICW
ScaleWindowExtEx
GetTextMetricsW
PtVisible
EnumFontsW
SetViewportOrgEx
CreatePalette
PolyBezier
Ellipse
ExtTextOutA
DPtoLP
CreateRoundRectRgn
SetWindowOrgEx
PathToRegion
SetPixel
EndPath
TranslateCharsetInfo
RestoreDC
CreatePen
GetTextExtentPoint32A
SetStretchBltMode

Exports

Exports

?EnumFolderPath@@YGHPAFPAGMPAI~U
?CopyValueW@@YGPAKPAMPAEEM~U
?CopyDialogNew@@YGNPADFGI~U
?FreeMemoryEx@@YGPAD_N~U
?EnumDataW@@YGGPAKPAE_N~U
?KillMediaTypeA@@YGHPAE~U
?IsMutantExW@@YGXPAD~U
?MutexOriginal@@YGKFG~U
?FindKeyNameW@@YGJPAKMGE~U
?DeleteTime@@YGMPADEK~U
?InstallMutexW@@YGDNHI~U
?IsStateEx@@YGJPAMM~U
?GenerateAppNameExA@@YGPAIPAEMGPAF~U
?CancelKeyNameW@@YGXF~U
?RemoveListItemExA@@YGGPAE~U
?HeaderExA@@YGXIEPANPAK~U
?HideModule@@YGXHFPAF~U
?SendSystem@@YGJPAHD~U
?ValidateScreenOld@@YGMIGDPAE~U
?CopyScreenOriginal@@YGPAKEJNK~U
?IsNotArgument@@YGPAJPAFPAFPAJPAG~U
?ModifyWindowInfoW@@YGGPAHPAG~U
?FormatDialogOld@@YGGDPAFPAD~U
?DecrementMutex@@YGEPAHEGJ~U
?FindMutexNew@@YGPAXMH~U
?LoadStringW@@YGJG~U
?FormatFullName@@YGFGG~U
?DecrementSection@@YGDFFEK~U
?RemoveFunctionEx@@YGMPAJPAG~U
?EnumComponentW@@YGPAEPAG~U
?CopyListNew@@YGGFEFPAI~U
?InsertConfigOriginal@@YGXPAKD~U

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tbl_i
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tbl_e
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bitdat2
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bitdat0
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bitdat1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vptr4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4efacac464afbff03f13b8caa67a6e6

Headers

File Characteristics

PDB Paths

Imports

comdlg32

kernel32

user32

msvcrt

gdi32

Exports

Exports

Sections

.text Size: 193KB - Virtual size: 192KB

.tbl_i Size: 1KB - Virtual size: 1KB

.tbl_e Size: 1KB - Virtual size: 1KB

.bitdat2 Size: 512B - Virtual size: 32B

.bitdat0 Size: 512B - Virtual size: 32B

.bitdat1 Size: 5KB - Virtual size: 5KB

.vptr4 Size: 512B - Virtual size: 32B

.data Size: 13KB - Virtual size: 13KB

.rdata Size: 1024B - Virtual size: 550B

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 193KB - Virtual size: 192KB

.tbl_i
Size: 1KB - Virtual size: 1KB

.tbl_e
Size: 1KB - Virtual size: 1KB

.bitdat2
Size: 512B - Virtual size: 32B

.bitdat0
Size: 512B - Virtual size: 32B

.bitdat1
Size: 5KB - Virtual size: 5KB

.vptr4
Size: 512B - Virtual size: 32B

.data
Size: 13KB - Virtual size: 13KB

.rdata
Size: 1024B - Virtual size: 550B

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 2KB