848e6664f91b0ce5dc5591346df1ec96_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

848e6664f91b0ce5dc5591346df1ec96_JaffaCakes118
Size

741KB
MD5

848e6664f91b0ce5dc5591346df1ec96
SHA1

bb210f802e346dfeb6456ea0323288c102ef968e
SHA256

5ad764c2b13e2f6963598e5c9f26349337d6525e254bdc51f5db40e4fc3dd1fb
SHA512

8b0782e38d5070f3ca0f7f511309cd170565caabd694077685eceb056b9a42edce3be3d4e333b4f9c5466023bfc2c1e70c3df87fe4c7b8fdf1201a1d2d56ed31
SSDEEP

12288:785BsTSj9YZQ+ce+ia1XCc6wiSo9ED0zm0xi+np8hZxW5QM6wGEdxlJbX:78sOZYG+z/Fbwirq0xi+p80D/bX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
848e6664f91b0ce5dc5591346df1ec96_JaffaCakes118

Files

848e6664f91b0ce5dc5591346df1ec96_JaffaCakes118
.dll windows:5 windows x86 arch:x86

eed919025583b3c40ebaea0158bbb10c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\FkqekdYeVaiwo\raKidju\hmifuzWvVtdBjb\tpjirgdMchzor.pdb

Imports

shlwapi

StrToIntA

msvcrt

wcstod
fputs
iswalpha
setvbuf
_controlfp
__set_app_type
isalnum
__p__fmode
strtol
free
strerror
__p__commode
_amsg_exit
_initterm
strcoll
strrchr
clearerr
fputc
system
_ismbblead
iswprint
bsearch
wcstombs
_XcptFilter
sscanf
atoi
memset
_exit
swprintf
isprint
strtok
atol
wcsstr
isupper
calloc
getenv
iswxdigit
mbstowcs
strpbrk
_cexit
strcspn
wcsncmp
vsprintf
__setusermatherr
__getmainargs
mbtowc
fprintf
iswctype

kernel32

LCMapStringA
SetFileAttributesA
CreateFileMappingW
SetCommState
CreateFileA
CompareFileTime
GetProcAddress
FindNextFileW
IsBadWritePtr
GetSystemWindowsDirectoryA
GetStdHandle
GetVersionExA
lstrcpynW
GetProcessHeap
LockResource
SetFilePointer
CreateSemaphoreA
CompareStringA
SetHandleCount
lstrcatA
GetThreadPriority
lstrcmpA
GetTickCount
GetVersionExW
LoadLibraryExW
HeapLock
GlobalDeleteAtom
lstrcatW
SetNamedPipeHandleState
VerSetConditionMask
GetCommState
GlobalMemoryStatusEx
HeapAlloc
SetWaitableTimer
ClearCommError
AreFileApisANSI
GlobalFindAtomW
GetTempFileNameW
HeapFree
SetEvent
GetTimeZoneInformation
GetLocaleInfoA
CreateWaitableTimerA
GetLocalTime
LockFile
GlobalMemoryStatus
OpenFileMappingA
MulDiv
GetTempPathW
GlobalGetAtomNameA
ExitThread
FindFirstChangeNotificationW
GetComputerNameA
lstrcpyW
CancelIo
GetModuleFileNameA
EnumSystemLocalesA
GetModuleFileNameW

user32

ShowCaret
GetSystemMetrics
RegisterClassA
GetDlgCtrlID
SetFocus
DefDlgProcW
GetWindowRect
RemoveMenu
GetKeyboardLayout
IsWindowUnicode
DialogBoxIndirectParamW
GetParent
MessageBoxExW
LoadCursorA
CreatePopupMenu
CreateWindowExA
GetClassInfoW
InvalidateRect
GetDlgItem
EndDialog
CheckRadioButton
IsDlgButtonChecked
CharNextW
DrawTextA
CharNextA
MapVirtualKeyW
DragObject
SetRect
SetWindowPlacement
GetDlgItemInt
OemToCharBuffA
GetMenuState
TranslateAcceleratorW
ClientToScreen
FillRect
RegisterWindowMessageW
CharToOemA
VkKeyScanW
GetAsyncKeyState
ScrollWindowEx
CharLowerBuffW
CheckDlgButton
PostThreadMessageA
GetDlgItemTextW
DestroyCursor
SetForegroundWindow
SetDlgItemTextW
GetMenu
SetRectEmpty
MoveWindow
EnumThreadWindows
DestroyAcceleratorTable
LookupIconIdFromDirectory
CreateIconFromResource
IsWindowEnabled
ValidateRect
CreateMenu
LoadCursorW
FindWindowA
WindowFromPoint
MonitorFromRect
SwitchToThisWindow
SetSysColors
GetFocus
GetKeyboardLayoutList
GetKeyboardLayoutNameW
OpenIcon
TrackPopupMenuEx
GetMenuItemRect
ActivateKeyboardLayout
AppendMenuA
HiliteMenuItem
InternalGetWindowText
MessageBoxA
GetActiveWindow
MapWindowPoints
CloseDesktop
LoadBitmapA
SetLastErrorEx
RemovePropW
CreateDialogParamA
GetWindowLongA
RegisterClassW
GetAltTabInfoA
SetDlgItemTextA
DrawStateW
IsChild
InSendMessageEx
EqualRect
CharToOemW
GetClassNameW
ClipCursor
SystemParametersInfoA
PostMessageA
GetWindowPlacement
IsRectEmpty
SendNotifyMessageW
SetScrollInfo
GetForegroundWindow
OemToCharA
PeekMessageA
LoadAcceleratorsA
CallWindowProcA
GetClassLongW
GetSysColor
MapVirtualKeyExW
ShowCursor
LoadBitmapW
IsIconic
MapVirtualKeyA
SetWindowPos
GetMessageExtraInfo
IsZoomed
GetKeyboardType
DrawTextW
CreateAcceleratorTableW
OpenInputDesktop
DispatchMessageW
DrawFrameControl
GetSystemMenu
RedrawWindow
EnableMenuItem
DrawStateA

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetFileTitleW
PrintDlgW
ReplaceTextW
GetOpenFileNameA

Exports

Exports

showtit[D
?SetDrawMaterialOOpsw@@YGK_KHE[D

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 710KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eed919025583b3c40ebaea0158bbb10c

Headers

File Characteristics

PDB Paths

Imports

shlwapi

msvcrt

kernel32

user32

comdlg32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 1.3MB

.rsrc Size: 710KB - Virtual size: 709KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 1.3MB

.rsrc
Size: 710KB - Virtual size: 709KB

.reloc
Size: 1KB - Virtual size: 1KB