89e8b057d1813a37d6273e7666c3bf50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

89e8b057d1813a37d6273e7666c3bf50_JaffaCakes118
Size

171KB
MD5

89e8b057d1813a37d6273e7666c3bf50
SHA1

8c4bbdfe92866a895647a26b1c718fd1d075ed70
SHA256

9197266f9d6eda8b0e226b0017abcf44a4a37903cade39e93071f048ab3f422f
SHA512

cc6fd4959f190881e6a02debe66d38725a522fa120b8b2632d0be16c0a8306523a0a39143b914fd5c76a77fc826fc90463cfb01beee3fc65baf4e2edf389237c
SSDEEP

3072:BNGUC/NDoD+rW3DRDeG0aMuuPxNkHws5Z/Za8M0fZxuR6olmM:BrchPruz0jvOpLB3tZERtlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e8b057d1813a37d6273e7666c3bf50_JaffaCakes118

Files

89e8b057d1813a37d6273e7666c3bf50_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c3fe91049c87f3015815fd80c815351a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\vtZywaaxpnj\nzqyxvRTzjj\ushvuhRFdqijSh.pdb

Imports

msvcrt

wcsrchr
wcscspn
fseek
_controlfp
wcschr
wcstod
__set_app_type
swscanf
__p__fmode
__p__commode
_amsg_exit
rand
putchar
atol
towupper
_initterm
_ismbblead
_XcptFilter
fgets
bsearch
strstr
fputc
exit
_exit
printf
malloc
swprintf
_cexit
strncmp
isdigit
calloc
toupper
system
iswdigit
time
fwrite
wcscoll
wcscat
iswctype
__setusermatherr
__getmainargs
fflush
isprint
strpbrk

kernel32

VirtualFree
LocalReAlloc
HeapUnlock
GetProcAddress
FormatMessageA
SetThreadPriority
DefineDosDeviceW
GetCommTimeouts
FileTimeToSystemTime
QueryPerformanceCounter
CreateThread
lstrlenW
FindResourceA
IsDBCSLeadByte
FileTimeToLocalFileTime
WaitForSingleObjectEx
GetAtomNameW
SetSystemTime
SetThreadAffinityMask
HeapCreate
CreateDirectoryW
GetNumberFormatW
GetSystemTimeAdjustment
OpenFileMappingW
GetUserDefaultLCID
FlushViewOfFile
lstrcmpA
GetModuleFileNameW
ExitThread
EnumResourceNamesW
TryEnterCriticalSection
GetUserDefaultLangID
RaiseException
SetThreadExecutionState
GetSystemDirectoryA
SetFileAttributesW
CreateEventW
TlsSetValue
GetCommandLineA
WaitCommEvent
SetCommBreak
GlobalAddAtomA
OpenFileMappingA
GetModuleHandleExW
FlushFileBuffers
TlsFree
DeleteFileW
SetCommState
CreateNamedPipeW
GetCommState
GlobalAddAtomW

comdlg32

FindTextW
ChooseFontW
CommDlgExtendedError
ChooseColorW

comctl32

ImageList_GetImageCount
CreateToolbarEx
CreatePropertySheetPageA
ImageList_Create
ImageList_AddMasked
ImageList_Write

user32

wvsprintfW
LoadMenuA
CreateDialogIndirectParamW
LoadStringW
GetScrollInfo
SendDlgItemMessageW
ActivateKeyboardLayout
ShowCursor
MessageBoxA
CreateIconFromResource
ShowCaret
SendNotifyMessageW
GetMenuItemRect
CharToOemA
CheckMenuItem
TranslateAcceleratorA
RegisterClassA
SetDlgItemInt
InvertRect
ShowScrollBar
CharToOemBuffA
OffsetRect
GetWindowLongW
FillRect
PostThreadMessageA
LoadCursorA
OemToCharA
MonitorFromRect
BringWindowToTop
ChangeMenuW
GetSubMenu
LoadIconW
CreateMenu
IsIconic
SetCursor
EndPaint
CallWindowProcW
IsRectEmpty
IsCharAlphaNumericW
MessageBoxW
SystemParametersInfoA
RegisterWindowMessageW
CheckDlgButton
GetMenuItemInfoW
SystemParametersInfoW
DrawIconEx
GetWindow
GetUserObjectInformationW
DeleteMenu
DialogBoxIndirectParamW
InternalGetWindowText
IsWindow
SetForegroundWindow
PeekMessageA
SetSysColors
InsertMenuA
GetMenuItemID
KillTimer
CharToOemW
ClientToScreen
MonitorFromPoint
SetWindowRgn
LoadMenuW
GetSystemMetrics
IsWindowVisible
DestroyWindow
CreateDialogParamW
DrawIcon
AppendMenuW
CascadeWindows
GetClassInfoA
PostMessageA
LookupIconIdFromDirectory
FindWindowExW
GetWindowRect
GetWindowDC
UnionRect
RegisterClassW
LoadAcceleratorsA
FindWindowExA
CreateCaret
DestroyIcon
DrawStateA
mouse_event
CopyRect
OpenIcon
SetPropW
GetKeyboardLayout
LoadImageW
LoadIconA
GetScrollRange
SendMessageW
SetRectEmpty
IsDialogMessageA
GetNextDlgTabItem
FindWindowW
IsChild
EnableScrollBar
MapDialogRect
DefFrameProcW
PostMessageW
SetDlgItemTextA
PostQuitMessage
IsWindowUnicode
ClipCursor
GetMessageTime
EnumChildWindows
MessageBoxExW
RemoveMenu

gdi32

PtVisible
GetTextColor
UnrealizeObject
CreateDCW
TranslateCharsetInfo
CreatePenIndirect
StretchBlt
PolyBezier
CreateRectRgnIndirect
SetDIBColorTable
SelectObject
CreateHalftonePalette
SetPaletteEntries
GetTextMetricsA
EndDoc
RectVisible
CreateFontIndirectA
CreateBitmap
CreateDIBitmap
RealizePalette
TextOutA
GetROP2
GetPixelFormat
TextOutW
EnumFontFamiliesW
SelectClipRgn
ScaleViewportExtEx
SetDIBits
GetTextFaceW
GetStockObject
MoveToEx
GetCharWidth32W
ExtFloodFill
CreateICW
IntersectClipRect
GetTextCharsetInfo
CreateFontA
LPtoDP
CreateRoundRectRgn
GetRgnBox
GetCurrentObject
CreateBrushIndirect
SetBkColor
GetObjectA
BeginPath

Exports

Exports

?FindSizeOld@@YGMPADJPAEF<V

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3fe91049c87f3015815fd80c815351a

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

comdlg32

comctl32

user32

gdi32

Exports

Exports

Sections

.text Size: 145KB - Virtual size: 145KB

.data Size: 22KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 145KB - Virtual size: 145KB

.data
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB