7782f495d2752bc5b25618abafd066f9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7782f495d2752bc5b25618abafd066f9_JaffaCakes118
Size

147KB
MD5

7782f495d2752bc5b25618abafd066f9
SHA1

03092aaff4f2a5df03d2e61106ce3d62c41b18b3
SHA256

d86635975ae82f6335fefcbf0e1aa884a019aff281cf3178472973bc989e2996
SHA512

1fe2577f6f5c473d31962d5817fb3586967e10770dad7e9652e8e541d5cd95ceb0486761403e9bc3e8953a956d9e1c7b2c04a5e143487faf97b2d77dc473692c
SSDEEP

3072:nhk9aJkWfQde7um+1ztW/U3fW4/3IeG3iTqjktgVzH2/zDb:nhxJkWfB+1zs/4+4/3IejTqjkwzED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7782f495d2752bc5b25618abafd066f9_JaffaCakes118

Files

7782f495d2752bc5b25618abafd066f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a4e132ffafdcd9182de523d029baa18c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\zxPVbxbm\znwbtzzyzkdbeg\pbpfuKxihx\MCpoDizOzKT\iuwpeuzVWl.pdb

Imports

ole32

CoInitialize
CoUninitialize

kernel32

SystemTimeToFileTime
TlsGetValue
IsBadWritePtr
GetNumberFormatA
GlobalMemoryStatus
GetCommState
GetOEMCP
CreateEventW
IsBadReadPtr
CopyFileW
LockFile
IsValidLocale
TransactNamedPipe
SizeofResource
GetSystemWindowsDirectoryA
HeapSize
GetWindowsDirectoryA
GlobalUnlock
SetFilePointer
GetExitCodeThread
ReadFile
SearchPathA
ConnectNamedPipe
GlobalHandle
GlobalGetAtomNameA
LocalFree
GetDateFormatA
GetStartupInfoA
SetPriorityClass
ExitThread
LockResource
Sleep
EscapeCommFunction
TlsFree
LoadResource
FormatMessageW
FoldStringW
LocalUnlock
RemoveDirectoryA
CompareStringA
GlobalSize
WaitForSingleObjectEx
GetStdHandle
GetThreadPriority
GetCompressedFileSizeW
OpenSemaphoreW
ConvertDefaultLocale
PulseEvent
DeviceIoControl
MoveFileExA
SetLastError
GetLocaleInfoA
GetThreadTimes

comctl32

PropertySheetA
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_SetIconSize
ImageList_Destroy
ImageList_ReplaceIcon

comdlg32

ChooseFontW
PrintDlgExW
ReplaceTextW
GetSaveFileNameA
PageSetupDlgW

msvcrt

fputc
atoi
strtol
_controlfp
__set_app_type
__p__fmode
wcschr
__p__commode
mktime
wcstol
_amsg_exit
system
towupper
strcspn
mbtowc
_initterm
strerror
strtok
_acmdln
strchr
exit
strcoll
_ismbblead
_XcptFilter
vswprintf
wcscmp
_exit
fputs
_cexit
iswprint
qsort
wcsncpy
printf
__setusermatherr
clock
strspn
iswdigit
isalnum
swscanf
__getmainargs
wcstombs
malloc
calloc
gmtime
free
wcscoll
putc

user32

LookupIconIdFromDirectory
GetWindowRect
GetSysColor
CreateIconFromResource
ShowWindow
RemoveMenu
GetLastActivePopup
GetPropW
RegisterWindowMessageW
SendDlgItemMessageW
MapDialogRect
SetWindowPlacement
DeferWindowPos
IsCharAlphaNumericW
IntersectRect
DrawAnimatedRects
CharPrevW
DestroyCursor
MapVirtualKeyA
WaitForInputIdle
SetWindowTextA
RegisterClassExA
AppendMenuA
SendInput
IsDialogMessageA
CreateAcceleratorTableW
DrawFocusRect
LoadCursorA
OpenInputDesktop
WindowFromPoint
PostThreadMessageW
LockWindowUpdate
LoadCursorW
TabbedTextOutW
UnloadKeyboardLayout
EqualRect
GetUpdateRect
SetTimer
mouse_event
DefWindowProcW
CharUpperW
CheckRadioButton
ToUnicodeEx
CheckMenuRadioItem
GetClassLongA
CreateMenu
SetWindowRgn
MonitorFromRect
GetTopWindow
TranslateMessage
PostQuitMessage
ModifyMenuW
CharPrevA
FindWindowW
GetClassInfoW
FindWindowExA
SetMenuItemInfoW
CheckMenuItem
GetDlgItemTextW
LoadStringA
GetWindowTextW
CharNextW
LoadImageW
CharToOemBuffA
CreateDialogIndirectParamW
MoveWindow
SetSysColors
GetUserObjectInformationA
GetMenuItemInfoW
GetMonitorInfoW
DrawTextA
GetShellWindow
IsIconic
RegisterClassW
LoadBitmapA
GetWindowDC
InsertMenuItemW
FillRect
ScrollWindowEx
SendMessageW
OemToCharA
GetActiveWindow
DeleteMenu
GetMenuItemID
ShowScrollBar
GetScrollPos
DefDlgProcA
GetMenuStringW
IsWindowUnicode
IsWindowVisible
TrackPopupMenuEx
GetIconInfo
FindWindowA
EnumThreadWindows
ReplyMessage
CharLowerBuffW
SendMessageA
SetClassLongW
LoadImageA
SetScrollPos
CharUpperBuffW
SendDlgItemMessageA
EndTask
MapVirtualKeyExW
CopyImage
ShowWindowAsync
InvalidateRgn
SetRectEmpty
EnumChildWindows
IsZoomed
AllowSetForegroundWindow
LoadIconA

gdi32

CreateEllipticRgnIndirect
GetWindowOrgEx
Polygon
RectInRegion
ExtTextOutW
GetPaletteEntries
BitBlt
RemoveFontResourceW
DeleteObject
GetLayout
GetTextExtentPointW
CreateFontIndirectW
RestoreDC
DeleteDC
Rectangle
GetFontData
CreateBitmapIndirect
ScaleViewportExtEx
Polyline
CreateFontW
CreatePalette
SetBkMode
GetObjectW
SetViewportExtEx
EndDoc
LPtoDP
FillRgn
GetTextExtentExPointW
CreateDCW
CreateRectRgnIndirect
SetAbortProc
LineTo
SetWindowOrgEx
SetBkColor
SetViewportOrgEx
RealizePalette
GetPixel
CreateDIBSection
SetROP2
EnumFontsW
StartDocW
RectVisible
GetDIBColorTable
PolyBezier
SetTextColor

Exports

Exports

?CopyRectDFIUioud@@YGKPA_WK@Z
?CopyRectIDoiuIODd@@YGKPA_WK@Z
?CopyRectIUDUiiud@@YGKPA_WK@Z
?CopyRectIUDiujdLJDUY@@YGKPA_WK@Z
?CopyRectJKDudjKu@@YGKPA_WK@Z
?CopyRectUDSuiduiJKDhj@@YGKPA_WK@Z
?CopyRectUIDUIdKJH@@YGKPA_WK@Z

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 401B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.strs
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bts2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts0
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4e132ffafdcd9182de523d029baa18c

Headers

File Characteristics

PDB Paths

Imports

ole32

kernel32

comctl32

comdlg32

msvcrt

user32

gdi32

Exports

Exports

Sections

.text Size: 94KB - Virtual size: 94KB

.edata Size: 512B - Virtual size: 401B

.strs Size: 5KB - Virtual size: 8KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 14KB - Virtual size: 64KB

.bts2 Size: 3KB - Virtual size: 3KB

.bts1 Size: 3KB - Virtual size: 3KB

.bts0 Size: 3KB - Virtual size: 3KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 94KB - Virtual size: 94KB

.edata
Size: 512B - Virtual size: 401B

.strs
Size: 5KB - Virtual size: 8KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 14KB - Virtual size: 64KB

.bts2
Size: 3KB - Virtual size: 3KB

.bts1
Size: 3KB - Virtual size: 3KB

.bts0
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 1KB - Virtual size: 1KB