861ac4822461386f94e730010c1dd2e6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

861ac4822461386f94e730010c1dd2e6_JaffaCakes118
Size

78KB
MD5

861ac4822461386f94e730010c1dd2e6
SHA1

d777e3a9655abc1c9a54a8384290993843b3ffff
SHA256

179eaff9f0a22c648b108763df2d0bc6d7fa65b3f7a133a1a0f1c9b7b7c581ba
SHA512

45a7b7add88cc9485d274ea429321176e48e68816f31492a92fe7f274211f7b7351ded376fe99ed01cc245dcce3c6039c8474adfbb709ce9bae8562fcdfab673
SSDEEP

1536:yHXDycXybch1NZkfaN66R9aJlSv0dTZzSqFSMxVtlix7TtbA:MDycXybcHnkfpSvW1f7tc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
861ac4822461386f94e730010c1dd2e6_JaffaCakes118

Files

861ac4822461386f94e730010c1dd2e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fde74da2bac50ec3fd34a99aa9bdb848

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\HRMxwHflZeo\iicjmrdEatwNq\WdvrwSdwy\mjhqFsjwa.pdb

Imports

gdi32

RectInRegion
TextOutW
ExtTextOutA
SetLayout
AddFontResourceW
CreateFontIndirectW
SetStretchBltMode
LineDDA
TranslateCharsetInfo
CreateDIBSection
GetWindowOrgEx
OffsetViewportOrgEx
GetTextExtentExPointW
GetTextExtentPointW
CreatePalette
StartPage
CreateDiscardableBitmap
BitBlt

kernel32

GetModuleHandleA
GetModuleFileNameA
GetOEMCP
FindClose
GlobalGetAtomNameW
CreateWaitableTimerA
InitializeCriticalSection
GetTempPathA
GetTickCount
GetShortPathNameA
TransactNamedPipe
SetCommMask
GlobalSize
GetOverlappedResult
GetFileTime
CreateEventW
GetVersionExW
GetLongPathNameW
GetWindowsDirectoryW
LoadLibraryW
VirtualQuery
SetTimerQueueTimer
GetFileAttributesExW

msvcrt

_controlfp
__set_app_type
bsearch
isprint
__p__fmode
__p__commode
_amsg_exit
_initterm
realloc
putchar
strstr
_acmdln
exit
atoi
_ismbblead
fseek
_XcptFilter
system
iswalpha
_exit
sscanf
_cexit
fgetc
wcslen
__setusermatherr
__getmainargs

shlwapi

StrStrIA
StrToIntExW

user32

DrawFocusRect
FillRect
GetSysColor
DeleteMenu
SetScrollPos
ScrollWindowEx
GetDoubleClickTime
IsWindowVisible
WaitMessage
GetClassInfoExA
CreateDialogParamW
SetLastErrorEx
SetPropW
GetWindowDC
OpenIcon
CascadeWindows
SetParent
CreateWindowExA
SetActiveWindow
CharToOemBuffA
CheckRadioButton
LoadCursorA
wvsprintfA
GetMonitorInfoW
GetFocus
IntersectRect
IsDlgButtonChecked
DestroyMenu
UpdateWindow
LoadAcceleratorsW
mouse_event
GetDlgItemTextA
CharToOemA
GrayStringW
CharLowerBuffW
GetMessageExtraInfo
CreateCursor
DrawTextA
CheckMenuItem
DrawTextW
GetKeyboardLayoutList
RegisterClassExW
OpenDesktopW

Exports

Exports

?IsNotTextExW@@YGPA_NE~U
?OnPointerEx@@YGIK~U
?CancelMutant@@YGPAJI~U
?IsListEx@@YGXGHPAG~U
?IsNotMemoryA@@YGNNGPAJ~U
?IsValidProjectA@@YGKHMFD~U
?OnProvider@@YGXKPAF~U
?IsValidAppNameExW@@YGXDDPAFPAI~U
?DumpDigitalDataCBhJEB@@YGKGHE@Z
?InvalidateSemaphoreW@@YGXPAIPAK_NJ~U
?CancelSizeExA@@YGHPAH~U
?GenerateFunctionExA@@YGDMPAH~U
?ModifyFilePathNew@@YGPA_NMPAIGH~U

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.init
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tidat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tedat
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.alloc
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fde74da2bac50ec3fd34a99aa9bdb848

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

msvcrt

shlwapi

user32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.init Size: 512B - Virtual size: 500B

.tidat Size: 2KB - Virtual size: 2KB

.tedat Size: 1024B - Virtual size: 790B

.rdata Size: 512B - Virtual size: 248B

.data Size: 2KB - Virtual size: 2KB

.alloc Size: - Virtual size: 47KB

.rsrc Size: 47KB - Virtual size: 46KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.init
Size: 512B - Virtual size: 500B

.tidat
Size: 2KB - Virtual size: 2KB

.tedat
Size: 1024B - Virtual size: 790B

.rdata
Size: 512B - Virtual size: 248B

.data
Size: 2KB - Virtual size: 2KB

.alloc
Size: - Virtual size: 47KB

.rsrc
Size: 47KB - Virtual size: 46KB

.reloc
Size: 2KB - Virtual size: 1KB