76a4db820ff80257fe934efc23b604c4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

76a4db820ff80257fe934efc23b604c4_JaffaCakes118
Size

216KB
MD5

76a4db820ff80257fe934efc23b604c4
SHA1

1a41cbe98c5d7f92aa2ccf9a430aeb153d4896b8
SHA256

9507e1bcddf988ce8b5492193f14f3bcaf4d72d89f19004c61f185afd7104f01
SHA512

9b7135844ea589961db1a458c1207a3960f407fda2c85d174bf3f36d896fa41e695cdbd0baf83211e679d826b0093670efbebf5f43d53a2289442c9a84c4914e
SSDEEP

6144:WfMkEoUOcCNvQnuOmfSMOyqlYv30YAPh:RzcQn5mfSZyq2v30YAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76a4db820ff80257fe934efc23b604c4_JaffaCakes118

Files

76a4db820ff80257fe934efc23b604c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b107b7ebc412d366573e20444f66c325

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\mlwqsdoAbmwoDj\jeQfuvlNGU\pzzGuypjgxxaJg\QNocQzA\lsCisANkwdF.pdb

Imports

user32

GrayStringW
PeekMessageA
ReleaseDC
IsIconic
SendNotifyMessageW
WindowFromPoint
VkKeyScanW
GetWindowPlacement
GetClassNameW
PtInRect
CharLowerA
CheckDlgButton
GetKeyboardLayout
DefDlgProcW
EnumChildWindows
SetClassLongW
LoadImageW
OemToCharBuffA
GetParent
PostQuitMessage
ShowOwnedPopups
RegisterClassExW
LoadStringA
EnableScrollBar
TileWindows
ReplyMessage
DestroyCursor
GetWindowTextW
GetWindowTextA
SetWindowTextA
FindWindowA
ClipCursor
GetMenuStringW
RegisterClassW
DialogBoxIndirectParamA
SetMenuItemInfoW
SystemParametersInfoW
EnumThreadWindows
IsMenu
ScrollWindow
DefWindowProcW
GetUpdateRgn
IsCharAlphaNumericW
GetMessageA
CopyRect
ModifyMenuW
GetMenuItemRect
GetWindowLongA
CharLowerW
GetNextDlgGroupItem
CreateMenu
CreateWindowExA
LoadIconA
GetDlgItemTextA
SetWindowLongW
AllowSetForegroundWindow
CharToOemBuffA
GetDCEx
BeginPaint
GetDC
IsCharUpperA
MoveWindow
EnumWindows
GetMenuStringA
keybd_event
ShowWindow
GetSysColorBrush
GetUserObjectInformationW
ShowCaret
GetWindowLongW
HiliteMenuItem
SetDlgItemTextA
GetClassInfoExW
GetForegroundWindow
CloseDesktop
RegisterClassExA
GetCaretPos
GetMenuCheckMarkDimensions
GetKeyState
TranslateAcceleratorA
KillTimer
MessageBoxW
AdjustWindowRect
MessageBoxExA
EnableMenuItem

kernel32

CreateEventA
lstrcmpiW
CreateFileMappingA
BuildCommDCBAndTimeoutsW
TransactNamedPipe
GetPriorityClass
SetHandleCount
GetACP
GetSystemDirectoryW
GlobalHandle
SetCommTimeouts
GetTickCount
Sleep
GetSystemTimeAdjustment
HeapCreate
DisconnectNamedPipe
RemoveDirectoryA
SetFileAttributesA
GetTempPathW
lstrcatA
ConnectNamedPipe
FindCloseChangeNotification
UnhandledExceptionFilter
SearchPathW
SetCommBreak
GetDateFormatW
CancelWaitableTimer
LoadLibraryA
GlobalLock
GetSystemWindowsDirectoryW
GetThreadPriority
GetCommProperties
HeapLock
HeapFree
FindFirstChangeNotificationW
GetLastError
CompareStringW
CreateSemaphoreW
GetCommTimeouts
CopyFileW
LeaveCriticalSection

gdi32

GetCharWidth32W
GetSystemPaletteUse
SetStretchBltMode
CreateHalftonePalette
ResizePalette
SetLayout
EndPage
SetPaletteEntries
GetTextExtentExPointW
GetNearestColor
GetROP2
CreatePen
CreateFontW
LineTo
StartDocW
ExtTextOutW
GetTextCharsetInfo
SetViewportExtEx
GetTextExtentPoint32W
Ellipse
SetPixel
UnrealizeObject
GetDIBits
RoundRect
SetDIBitsToDevice
GetObjectA
GetTextAlign
SetBitmapBits
Polyline
PtInRegion
CombineRgn
CreateRectRgn
GetTextExtentPointW
CreatePatternBrush
IntersectClipRect

shlwapi

PathStripPathW

msvcrt

_controlfp
__set_app_type
__p__fmode
gets
mktime
free
srand
fgetc
toupper
floor
swscanf
__p__commode
_amsg_exit
wcstok
_initterm
strncmp
wcscmp
_acmdln
wcstoul
exit
_ismbblead
localtime
_XcptFilter
isdigit
puts
_exit
fseek
strerror
strpbrk
_cexit
wcstod
fclose
__setusermatherr
strstr
mbstowcs
strtoul
putchar
isprint
__getmainargs

comctl32

ImageList_SetIconSize
ImageList_Draw
PropertySheetW
ImageList_GetImageCount
InitCommonControlsEx

Exports

Exports

?SleepAhHJDud@@YGKEPA_WG@Z
?SleepUDSUDlkdlsds@@YGKEPA_WG@Z
?SleepUDudjkUD@@YGKEPA_WG@Z
?SleepYDyjDuUI@@YGKEPA_WG@Z

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 355B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b107b7ebc412d366573e20444f66c325

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

gdi32

shlwapi

msvcrt

comctl32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 84KB

.edata Size: 512B - Virtual size: 355B

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 1024B - Virtual size: 54KB

.rsrc Size: 108KB - Virtual size: 107KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 84KB - Virtual size: 84KB

.edata
Size: 512B - Virtual size: 355B

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 1024B - Virtual size: 54KB

.rsrc
Size: 108KB - Virtual size: 107KB

.reloc
Size: 2KB - Virtual size: 1KB