86f2f15315a49227319b0cf4b0efe6ac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

86f2f15315a49227319b0cf4b0efe6ac_JaffaCakes118
Size

140KB
MD5

86f2f15315a49227319b0cf4b0efe6ac
SHA1

86eea77ee8ba9b311ef677787d795e872533afd8
SHA256

8c5cfadb6d761fbeee16b3778d425f95c76bf4e60b8c63f93a956cea53a2b8a1
SHA512

6d18c488281ebb360e1f0e60e73eb4b72da173a9de2030267317ce6dc67992fffed30b49ecabf6ae2686a8ca8e85b71c412b8899a420f89db39c06ad4ddc3590
SSDEEP

3072:VGemEQvwQqmnrApDmSQQs6nLaTRgzbZyrm9AZvNarXvHVI0v:QUKomrss6nuS0Yrfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86f2f15315a49227319b0cf4b0efe6ac_JaffaCakes118

Files

86f2f15315a49227319b0cf4b0efe6ac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f39845aea9ebfed5b7b128448f84d3fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\bbjteydv\snwzgldiXI\vjEymhzpqYt.pdb

Imports

shlwapi

PathIsUNCW

msvcrt

isupper
wcsncpy
swprintf
fseek
fprintf
atoi
mbtowc
_controlfp
sscanf
fflush
strcoll
strpbrk
getenv
strtoul
__set_app_type
calloc
__p__fmode
wcsrchr
swscanf
fread
towlower
vsprintf
__p__commode
_amsg_exit
_initterm
_ismbblead
gmtime
wcsncmp
iswprint
iswxdigit
memset
mktime
wcscpy
_XcptFilter
fgets
_exit
clock
putchar
srand
_cexit
wcslen
getc
strtol
__setusermatherr
fputc
wcscmp
strchr
__getmainargs

kernel32

GetSystemTimeAdjustment
GlobalGetAtomNameW
CreateWaitableTimerA
SizeofResource
SleepEx
GetStartupInfoW
SetLocalTime
LocalAlloc
HeapCreate
lstrcmpiA
SearchPathW
GetVersion
CreateNamedPipeW
LocalFree
IsValidLanguageGroup
CreateSemaphoreA
SetFileAttributesW
OpenSemaphoreW
CancelWaitableTimer
GetCompressedFileSizeW
GetShortPathNameW
GetCommState
HeapAlloc
SetEvent
CompareStringA
GetStdHandle
HeapValidate
CreateFileA
GetDateFormatA
WaitForSingleObject
GetTempPathA
GetTimeFormatA
TransactNamedPipe
SetFilePointer
GetExitCodeThread
lstrcatW
SetFileApisToOEM
GetModuleFileNameA
SetCommTimeouts
HeapWalk
LoadResource
DeleteCriticalSection
FreeResource
TlsSetValue
lstrcpynW
VerifyVersionInfoW
GetACP
GetProcAddress
SetCommMask
GetOverlappedResult
ConvertDefaultLocale
EnumResourceLanguagesA
HeapFree
SetMailslotInfo
OpenEventW
GetProcessHeap
CompareFileTime
GetShortPathNameA
GetOEMCP

user32

GetClassNameW
SetCursorPos
CheckMenuRadioItem
DrawIcon
SendMessageTimeoutW
MessageBoxW
GetWindowLongA
GetSysColor
AppendMenuW
GetShellWindow
RemoveMenu
CharPrevA
LoadBitmapA
AdjustWindowRect
SetClassLongW
InvalidateRect
CallWindowProcW
GetSystemMetrics
GetWindow
SetActiveWindow
FindWindowA
SetMenuDefaultItem
EnumChildWindows
IsDialogMessageW
IsWindowVisible
LoadAcceleratorsW
MapWindowPoints
ScrollWindowEx
DrawTextW
GetUpdateRect
GetWindowLongW
InSendMessage
BringWindowToTop
SetDlgItemInt
PeekMessageA
PostMessageA
ShowCaret
CharToOemA
GetWindowTextW
CreateIconFromResource
IsZoomed
SetWindowPos
CreateDialogParamA
CreateCursor
FindWindowW
GetMenuState
GetMenuItemCount
GetScrollPos
EnableMenuItem
TranslateMessage
RedrawWindow
DeleteMenu
SendMessageW
LoadStringW
ShowCursor
IsCharAlphaA
DispatchMessageW
CharPrevW
GetClassInfoExA
DeferWindowPos
DefWindowProcA
IsWindow
CreateDialogParamW
SwitchToThisWindow
SetWindowLongA
GetMenu
ChangeMenuW
EndPaint
CharLowerBuffW
IsCharAlphaW
LoadCursorW
RegisterClassExA
GetClassInfoW
SendDlgItemMessageA
EnableScrollBar
InsertMenuW
SetWindowLongW
CopyImage
IsMenu
CreateCaret
GetMenuItemRect
SetDlgItemTextW
SetUserObjectInformationW
GetClientRect
FillRect
CreateIconIndirect
IsWindowEnabled
DrawIconEx
GetDoubleClickTime
IntersectRect
GetFocus
wvsprintfA
RemovePropW
SetMenuItemBitmaps
OemToCharA
DestroyAcceleratorTable
ScreenToClient
CheckRadioButton
ChildWindowFromPointEx
SetFocus
GetClassLongW
SetWindowTextA
SetMenu
DestroyWindow
LockWindowUpdate
ArrangeIconicWindows
GetKeyState
BeginPaint
GetAsyncKeyState
ModifyMenuW
RegisterWindowMessageA
WaitForInputIdle
GetScrollInfo
EndDialog
DragObject
GetWindowPlacement
TrackPopupMenuEx
GetMonitorInfoW
SendNotifyMessageW
GetWindowTextLengthW
TabbedTextOutW
GetIconInfo

Exports

Exports

?CalculateStringCapacity@@YGKDDPAX:O

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.align
Size: 1KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.date
Size: 512B - Virtual size: 99B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dati
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.char
Size: 1024B - Virtual size: 567B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f39845aea9ebfed5b7b128448f84d3fa

Headers

File Characteristics

PDB Paths

Imports

shlwapi

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.align Size: 1KB - Virtual size: 124KB

.date Size: 512B - Virtual size: 99B

.dati Size: 6KB - Virtual size: 5KB

.char Size: 1024B - Virtual size: 567B

.odata Size: 13KB - Virtual size: 13KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 104KB - Virtual size: 103KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.align
Size: 1KB - Virtual size: 124KB

.date
Size: 512B - Virtual size: 99B

.dati
Size: 6KB - Virtual size: 5KB

.char
Size: 1024B - Virtual size: 567B

.odata
Size: 13KB - Virtual size: 13KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 104KB - Virtual size: 103KB

.reloc
Size: 2KB - Virtual size: 1KB