772222fbf125b0edc596f996a462cc0f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

772222fbf125b0edc596f996a462cc0f_JaffaCakes118
Size

213KB
MD5

772222fbf125b0edc596f996a462cc0f
SHA1

96db72440f59af7830f8cb956b202b439d3973b6
SHA256

b43fee6c48a9d22f0a11fe0a2c788d4635db5f71f5f84672321ac9ddd15de193
SHA512

d49db66a90e9720e82ce531ef29f99effeeed41a1f2369951d9f94db0a2c6357dd3eb4ba2e5a6f7910c93256f3699da02b118e4341faa21c5e60d85afd1294a0
SSDEEP

6144:9bNyIJfnhxO/Lcg/KSn9v8Oelh2SggjgG:9BlJfnhx8/KSnaOlSgrG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772222fbf125b0edc596f996a462cc0f_JaffaCakes118

Files

772222fbf125b0edc596f996a462cc0f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

212f039fc372202d107422456137d8ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\udyqpofLlyx\nvhbwksk\ymgqsonh\dEhxmibimyfm\THgsuQpqysmq.pdb

Imports

gdi32

RealizePalette
CreateBitmap
SetMapMode
SetTextAlign
SetPaletteEntries
RoundRect
MoveToEx
CombineRgn
CreatePolygonRgn
CreatePatternBrush
CreateRectRgnIndirect
GetTextExtentPointW
ScaleWindowExtEx
SelectPalette
CreateFontIndirectW
GetWindowOrgEx
CreateFontW
Polyline
RectInRegion
GetTextCharsetInfo
Polygon
RemoveFontResourceW
SelectObject
SetDIBColorTable
ExtTextOutW
DeleteDC
GetTextExtentPointA
EndPath
ExcludeClipRect
GetStockObject
BeginPath
StretchDIBits
GetTextExtentExPointW
SetViewportOrgEx
SetWindowExtEx
GetFontData
GetTextFaceW

user32

GetClassInfoExW
WaitMessage
GetDC
GetMenuStringW
ToUnicodeEx
SetMenuItemBitmaps
WaitForInputIdle
LoadBitmapA
TranslateAcceleratorA
DefDlgProcA
SwitchToThisWindow
LoadIconW
DrawFrameControl
SetCaretPos
DrawTextW
DefFrameProcW
SetPropW
GetPropW
DialogBoxParamA
SetForegroundWindow
AdjustWindowRectEx
EnableWindow
EnableScrollBar
ActivateKeyboardLayout
DestroyCursor
TranslateAcceleratorW
GetMonitorInfoW
GetWindowTextLengthW
SetRect
CharUpperBuffA
LoadIconA
SetWindowRgn
LoadAcceleratorsW
GetClipCursor
VkKeyScanW
LoadCursorA
CreateCaret
EnumThreadWindows
ShowWindowAsync
GetKeyboardLayout
GetSystemMenu
MessageBoxA
RegisterHotKey
InsertMenuW
GetMenuState
InvalidateRect
CharUpperBuffW
GetSysColorBrush
GetWindowTextW
DestroyWindow
IsMenu
GetWindowLongA
SendDlgItemMessageA
DefWindowProcA
GetMenuItemID
GetClassLongW
IsCharUpperA
BeginPaint
SetMenu
DefDlgProcW
GetKeyboardType
EnableMenuItem
SetWindowPos
GetDesktopWindow
IsWindowEnabled
FrameRect
GetKeyState
RegisterWindowMessageW
BeginDeferWindowPos
DrawStateA
SetClassLongW
CharLowerBuffW
PostThreadMessageA
GetLastActivePopup
OffsetRect
DispatchMessageA
GetDialogBaseUnits
LoadAcceleratorsA
ShowCursor
SendMessageTimeoutA
CharLowerW
GetUserObjectInformationW
DeferWindowPos
ValidateRect
CopyImage
GetParent
GetFocus
GetWindowRect
CheckMenuRadioItem

comdlg32

PageSetupDlgW
PrintDlgW
GetOpenFileNameW
GetOpenFileNameA

msvcrt

iswspace
getenv
_controlfp
__set_app_type
mbstowcs
clearerr
wcscat
srand
__p__fmode
__p__commode
strpbrk
isdigit
wcstombs
_amsg_exit
_initterm
wcstod
iswxdigit
strrchr
strtoul
wcstol
_acmdln
fflush
isalpha
ftell
strspn
exit
gmtime
sscanf
_ismbblead
_XcptFilter
iswdigit
_exit
fgetc
fprintf
_cexit
fputc
__setusermatherr
ungetc
mktime
__getmainargs

kernel32

CreateNamedPipeW
GetCommState
GetComputerNameA
GetSystemDirectoryA
VirtualProtect
LockFile
FindFirstFileW
GetCurrentDirectoryW
LoadLibraryW
SetSystemTimeAdjustment
FindResourceExA
CloseHandle
EnumResourceNamesA
BuildCommDCBAndTimeoutsW
GetThreadTimes
FindFirstFileA
TlsSetValue
GlobalFlags
GlobalGetAtomNameA
LCMapStringW
GetSystemTime
OpenEventW
lstrcpynW
GlobalReAlloc
FileTimeToSystemTime
GetAtomNameW
TryEnterCriticalSection
LocalAlloc
MultiByteToWideChar
GetCurrentThread
SystemTimeToFileTime
GetTickCount
GlobalSize
SetErrorMode
LoadLibraryExW
IsValidLocale
FindNextFileW
GetShortPathNameW
LoadLibraryExA
GlobalAddAtomW
IsBadWritePtr
ReadFile

Exports

Exports

?WaitForMultipleObjectsIUIUDSiuld@@YGKEPA_WG@Z
?WaitForMultipleObjectsJUDiuDLIJU@@YGKEPA_WG@Z
?WaitForMultipleObjectsUYDyudkjh@@YGKEPA_WG@Z
?WaitForSingleObjectYDEyuhgDU6d@@YGKEPA_WG@Z

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

212f039fc372202d107422456137d8ec

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

comdlg32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 18KB - Virtual size: 18KB

.rdata Size: 2KB - Virtual size: 73KB

.rsrc Size: 122KB - Virtual size: 122KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 18KB - Virtual size: 18KB

.rdata
Size: 2KB - Virtual size: 73KB

.rsrc
Size: 122KB - Virtual size: 122KB

.reloc
Size: 2KB - Virtual size: 1KB