74d0d8b1534aaa7af77a011198ff2b70_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

74d0d8b1534aaa7af77a011198ff2b70_JaffaCakes118
Size

204KB
MD5

74d0d8b1534aaa7af77a011198ff2b70
SHA1

c3947a05428f4b5b463ea40c6cb1b94f0bf73f0d
SHA256

9fe923dcc7df70c5c2dcd462c9be93fa0f7940b3866441a541543bff3b4b09ed
SHA512

9a82f324de15482722f756680108ccb3d39258ffe0ff4e0d72d720f4bda9842663b35d544c95cfd1f4cddcb393101f2f35136abffbd33579c2ec880010707251
SSDEEP

3072:MPkrrS/mJBA2QBmhpN7z0c01S0OnMGRQtgWv2auOebsQZLY51tt:QyrAy+Dw0OMltDvVrom1t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74d0d8b1534aaa7af77a011198ff2b70_JaffaCakes118

Files

74d0d8b1534aaa7af77a011198ff2b70_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\qTDzNrZgucypv\jbWyxEmvga\tjZfurwhRbEr\JsDmkhb.pdb

Imports

msvcrt

strcpy
ungetc
clearerr
wcsncmp
_controlfp
malloc
__set_app_type
system
__p__fmode
calloc
__p__commode
strtoul
vsprintf
wcspbrk
_amsg_exit
_initterm
isalnum
fgetc
_ismbblead
bsearch
strchr
_XcptFilter
strcoll
time
localtime
wcstoul
wcscpy
putchar
fputc
wcscat
strcspn
fseek
mbstowcs
towlower
qsort
swscanf
_exit
wcstombs
_cexit
wcsncpy
isprint
__setusermatherr
vswprintf
__getmainargs

gdi32

SetDIBColorTable
SetBrushOrgEx
CombineRgn
GetBkMode
SelectPalette
CreateBrushIndirect
CreatePolygonRgn
CreateHatchBrush
GetSystemPaletteUse
CreateFontW
CreateFontIndirectW
Polyline
GetTextMetricsA
TranslateCharsetInfo
UnrealizeObject
GetDeviceCaps
GetROP2
EnumFontFamiliesExW
CreateDiscardableBitmap
SetDIBits
DeleteDC
GetViewportOrgEx
GetSystemPaletteEntries
WidenPath
GetObjectA
GetTextMetricsW
GetPixel
RemoveFontResourceW
RectVisible
GetMapMode
StretchBlt
GetNearestPaletteIndex
SetDIBitsToDevice
GetLayout
SetTextColor
CreateEllipticRgnIndirect
GetTextColor
GetTextFaceW
CreatePalette
SetPixel
SetAbortProc
ExcludeClipRect
Ellipse
ResizePalette
SelectClipRgn
Polygon
CreateHalftonePalette

shlwapi

PathFileExistsA

kernel32

FileTimeToSystemTime
OpenFile
SearchPathA
DeleteCriticalSection
GetPriorityClass
CancelWaitableTimer
lstrlenA
GetAtomNameW
SetThreadAffinityMask
GlobalAlloc
SetHandleCount
GetTempPathW
GlobalGetAtomNameW
CreateEventA
SuspendThread
GetThreadContext
lstrcmpW
IsBadReadPtr
lstrcpynW
CreateRemoteThread
GetCurrentDirectoryW
GetShortPathNameA
CreateFileA
EnumResourceNamesA
GetModuleFileNameW
RtlUnwind
LocalAlloc
WinExec
GetModuleHandleA
GetLastError
GetComputerNameA
GetThreadLocale
GetFullPathNameW
RemoveDirectoryW
MapViewOfFile
SetTimerQueueTimer
GetHandleInformation
GetFileAttributesExA
LockFile
AreFileApisANSI
FindResourceExW
FindClose
SetMailslotInfo
FreeLibrary
ReadFile
SetThreadPriority
GetTempPathA
DeviceIoControl
FileTimeToLocalFileTime
CreateWaitableTimerA
GetVersion

user32

CheckMenuRadioItem
SetForegroundWindow
GetScrollPos
MapDialogRect
ChangeMenuW
GetClassLongW
MapVirtualKeyExW
FindWindowExA
DispatchMessageA
IsCharAlphaNumericW
CreateCaret
DrawFrameControl
CloseDesktop
DialogBoxParamW
ArrangeIconicWindows
EqualRect
LoadStringA
PeekMessageA
CharUpperW
GetDoubleClickTime
IsWindowVisible
DrawTextW
DrawMenuBar
HiliteMenuItem
TileWindows
CharLowerBuffW
CreateWindowExA
SetWindowTextA
SetRectEmpty
FrameRect
GetMessageExtraInfo
SetUserObjectInformationW
DestroyAcceleratorTable
GetMenuItemCount
keybd_event
OpenIcon
SetActiveWindow
SetSysColors
LoadMenuA
CharNextW
MessageBoxA
TranslateAcceleratorW
DefFrameProcA
SystemParametersInfoA
RegisterClassW
MessageBoxExA
CharLowerW
DialogBoxParamA
GetMessageW
SetPropW
FindWindowA
IsChild
CopyAcceleratorTableW
EnableWindow
SetScrollInfo
LoadStringW
CharToOemW
GetClipCursor
SetMenuDefaultItem
InvalidateRect
LoadBitmapA
GetForegroundWindow
DrawStateW
TranslateAcceleratorA
IsWindow
SendInput
KillTimer
LoadImageA
GetKeyboardType
DrawIcon
TabbedTextOutW
GetWindow
InflateRect
MessageBoxW
SetCursor
ToUnicodeEx
IsRectEmpty
GetClassLongA
IsWindowEnabled
SwitchToThisWindow
GetDCEx
LoadCursorA
InvalidateRgn
IsWindowUnicode
OffsetRect
CheckRadioButton
RegisterWindowMessageW
RegisterHotKey
IntersectRect
OpenInputDesktop
RegisterClassA
SetWindowRgn
LoadMenuW
GetMenuCheckMarkDimensions
DefWindowProcA
AdjustWindowRectEx
AllowSetForegroundWindow
GetWindowTextLengthW
IsIconic
SetMenuItemInfoW
SetMenu
ClipCursor
LookupIconIdFromDirectory
CharUpperA
LockWindowUpdate
GetMenuStringA
MapWindowPoints
GetTopWindow
CreateDialogParamW
GetNextDlgGroupItem
PtInRect

Exports

Exports

?HidePointerOriginal@@YGFKPAIPAD<V

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

PDB Paths

Imports

msvcrt

gdi32

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 135KB - Virtual size: 201KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 135KB - Virtual size: 201KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB