896d624969e168822b70b170608e3bd0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

896d624969e168822b70b170608e3bd0_JaffaCakes118
Size

144KB
MD5

896d624969e168822b70b170608e3bd0
SHA1

6f4f1d3d5711dcb6e5808a491d2f682e98068ea5
SHA256

970a8d1f5c3adc89b307d392df2d11a435b890c42ca47181acfad2b64b6215f1
SHA512

66db71c8819dad942dad2b697de00a02632a7997db2fa94587b377c86576cb53074d59b8c6135e0ac66773e293c809d4711dd67f989d821005654f7be9d4cf9b
SSDEEP

3072:UMYL+vqiDJSTVW4QfuqY4n4uVy3iQGO/xyVTm/iFAp:UhL2OTamf448tm/WAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
896d624969e168822b70b170608e3bd0_JaffaCakes118

Files

896d624969e168822b70b170608e3bd0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8e74a47d9cd7f4348a3a9f38969cd0f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\kSYZdegN\aIjFHfnbjD\rOyNcHwYzhqMu.pdb

Imports

gdi32

EndPath
GetROP2
SelectObject
StartPage
CreateFontIndirectW
Rectangle
SetBitmapDimensionEx
SaveDC
CreateDIBSection
OffsetRgn
GetNearestColor
GetClipBox
PtInRegion
GetLayout
GetTextExtentPointA
GetFontData
StartDocW
GetObjectA
CombineRgn
SetDIBColorTable
ResizePalette
SetDIBitsToDevice
CreateFontA
GetCharWidth32W
SetViewportOrgEx
ExtTextOutA
SetRectRgn
DPtoLP
CreateBrushIndirect
SetPaletteEntries
CreatePolygonRgn
SelectPalette
TranslateCharsetInfo
CreateDCW
CreatePatternBrush
GetTextColor
TextOutA
CreateBitmapIndirect
CreateCompatibleDC
Polyline
PathToRegion
GetTextExtentExPointW
LPtoDP
GetTextMetricsA
PolyBezier
SetBkMode
CreateFontIndirectA
Escape
EndPage
SetBrushOrgEx

kernel32

WinExec
GetCurrentDirectoryW
HeapAlloc
GetDateFormatA
CreateDirectoryW
LCMapStringW
LocalLock
HeapWalk
GetModuleHandleA
WriteFile
GetVersionExA
InitializeCriticalSection
OpenSemaphoreW
LocalFree
GetExitCodeThread
RegisterWaitForSingleObject
TerminateThread
WaitForMultipleObjects
ReadFile
GetWindowsDirectoryA
SetCurrentDirectoryA
GetLastError
LoadLibraryW
FileTimeToLocalFileTime
PulseEvent
FindClose
OpenEventW
GetFileSize
CreateWaitableTimerA
GetCommConfig
CreateEventW
SystemTimeToFileTime
GetStartupInfoA
GetStartupInfoW
GetModuleFileNameW
GlobalCompact
GlobalGetAtomNameW
RemoveDirectoryW
SearchPathW
GetThreadPriority
ResumeThread
SetHandleCount
GetTimeFormatA
GetStdHandle
GetHandleInformation
LockFile
OpenFileMappingW
CreateNamedPipeA
CreateWaitableTimerW
MulDiv
CreateMutexA
ClearCommBreak
Sleep
LoadLibraryExW
FreeResource
GetComputerNameExW
lstrlenA

msvcrt

fread
isxdigit
wcstod
towupper
iswctype
isalnum
_controlfp
__set_app_type
__p__fmode
__p__commode
strrchr
bsearch
vswprintf
_amsg_exit
islower
putchar
_initterm
wcspbrk
strncmp
_acmdln
rand
exit
_ismbblead
strcspn
_XcptFilter
_exit
iswalpha
strtoul
mbstowcs
strchr
_cexit
iswxdigit
malloc
wcsncmp
__setusermatherr
free
isupper
isalpha
isprint
__getmainargs
localtime
isspace
tolower
calloc
toupper
vsprintf
iswdigit
wcscpy
fputc

user32

GetNextDlgGroupItem
LoadStringA
GetUpdateRgn
OpenDesktopW
CheckRadioButton
GetSystemMetrics
GetKeyboardType
SetWindowPos
RegisterHotKey
TranslateAcceleratorW
keybd_event
InvalidateRgn
LoadBitmapW
GrayStringW
CreateCaret
RegisterWindowMessageA
ShowCursor
GetClassInfoExA
CreateIconFromResource
TrackPopupMenu
GetClientRect
wsprintfW
GetClassInfoW
GetNextDlgTabItem
InflateRect
EnableWindow
FindWindowExW
ChangeMenuW
ArrangeIconicWindows
RegisterWindowMessageW
CloseDesktop
LoadAcceleratorsW
ShowScrollBar
GetScrollRange
DestroyCaret
GetSystemMenu
MonitorFromPoint
CheckMenuItem
GetWindowTextW
AttachThreadInput
SetMenuItemInfoW
CheckMenuRadioItem
GetSubMenu
ClipCursor
IsCharAlphaW
LoadIconA
MapVirtualKeyExW
MapWindowPoints
RegisterClassExW
FindWindowA
BeginDeferWindowPos
LoadMenuA
GetAsyncKeyState
GetMessageTime
OpenIcon
SetWindowLongA
SetSysColors
SetActiveWindow
IsWindow
SystemParametersInfoA
SendNotifyMessageW
GetClassInfoExW
VkKeyScanW
IsWindowEnabled
GetDlgItemTextA
ShowCaret
DestroyAcceleratorTable
CharUpperBuffA
DrawIcon
HiliteMenuItem
GetAltTabInfoW
GetForegroundWindow
GetMenuItemID
SetScrollPos
SetScrollInfo
GetClassNameW
DrawMenuBar
GetActiveWindow
SetWindowPlacement
GetKeyboardLayoutNameW
GetDC
CreateMenu
RemovePropW
OffsetRect
ReleaseDC
SetDlgItemInt
DefDlgProcA
GetClassLongW
DestroyWindow
GetWindowPlacement
SetMenu
ModifyMenuW
GetFocus
SetMenuItemBitmaps
FillRect
GetKeyState
MessageBoxExA
GetWindowDC
UpdateWindow
MapVirtualKeyA
CharNextA
RegisterClassA
EnumWindows
DestroyIcon
KillTimer
IsChild
LoadAcceleratorsA
AdjustWindowRect
AdjustWindowRectEx
InSendMessageEx
GetWindowTextA
GetMenuItemRect
DragObject
GetDlgCtrlID
DefWindowProcW
SetDlgItemTextA
EndDialog
LoadMenuW
GetCursorPos
mouse_event
DrawStateA

Exports

Exports

?LoadProfileExW@@YGDF]A
?BitCounterArrayIdeDunAs@@YGKGE@Z
?ShowVersionNew@@YG_NMJKPAN]A

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e74a47d9cd7f4348a3a9f38969cd0f5

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 128KB

.rsrc Size: 119KB - Virtual size: 119KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 128KB

.rsrc
Size: 119KB - Virtual size: 119KB

.reloc
Size: 1KB - Virtual size: 1KB