9576f74d3f938cc5ea250c70a17ec0ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9576f74d3f938cc5ea250c70a17ec0ed_JaffaCakes118
Size

171KB
MD5

9576f74d3f938cc5ea250c70a17ec0ed
SHA1

292675eaa22b1fb6bdc361466e0e10cf39f990c8
SHA256

3caa9e442ca6d4e5e94663de195c20bdd4beb35ba4b2085a30863e228f06d51e
SHA512

eb6fe6fe97190c00d58a73d4f0258153b5d2ed33048d2f5522f8f80d4b4b52501b501bf713ecde94b6df554371f680cca766d3fc7892a694875583d8b5b7a8a5
SSDEEP

3072:D4B5xT6JxmVgbmLziVsb+onKIrWG+fCGnCIjVmlENe7bE3GKROeGCYSvK4B5z9S9:D4pT6PvbmLtb+oKZGACGCI8lMOebYSyp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9576f74d3f938cc5ea250c70a17ec0ed_JaffaCakes118

Files

9576f74d3f938cc5ea250c70a17ec0ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d63fcb8d21e14ecfa821276bad7717ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\viZxjsiCdz\vqaxzkHnngspb\ekthSlnQfhe\jrmeacrnyMqM\Qtrsupw.pdb

Imports

msvcrt

isdigit
_controlfp
__set_app_type
setvbuf
wcschr
free
clearerr
__p__fmode
gets
__p__commode
fgetc
remove
wcscat
strchr
mbtowc
_amsg_exit
wcsrchr
vsprintf
mktime
bsearch
atoi
strstr
_initterm
wcscspn
toupper
getc
_ismbblead
_XcptFilter
isupper
qsort
_exit
tolower
wcstok
putchar
_cexit
iswctype
isalpha
wcstol
rand
__setusermatherr
wcscpy
strtoul
exit
fread
isspace
wcspbrk
wcsstr
__getmainargs

user32

SetFocus
MonitorFromRect
SetDlgItemInt
UpdateWindow
IsCharAlphaNumericW
GetClipCursor
GetClassLongW
SetRectEmpty
IsCharUpperA
DrawTextW
SetCursorPos
MapDialogRect
ModifyMenuW
GetDlgItem
LoadStringA
IsZoomed
CharPrevA
RemoveMenu
GetParent
MapWindowPoints
DrawStateA
GetActiveWindow
PostMessageW
SetCaretPos
LoadCursorA
CharLowerW
GetSystemMetrics
LoadBitmapA
SetWindowPos
SetLastErrorEx
DialogBoxIndirectParamA
GetClassInfoExW
ValidateRect
CharUpperBuffA
WaitMessage
SendInput
InSendMessage
SetClassLongW
SetMenuItemInfoW
SetScrollInfo
LoadMenuW
wvsprintfA
IsDlgButtonChecked
CharPrevW
TrackPopupMenuEx
IsMenu
GetKeyboardType
DrawMenuBar
GetMenuState
SetPropW
SetWindowRgn
PeekMessageA
SetDlgItemTextW
GrayStringW
GetDlgCtrlID
GetWindowTextA
SetMenu
AllowSetForegroundWindow
DrawFrameControl
GetPropW
FindWindowExA
SystemParametersInfoA
MapVirtualKeyExW
EnableWindow
InvertRect
CreateDialogParamA
DrawTextA
OemToCharA
ChangeMenuW
GetSubMenu
GetMessageExtraInfo
GetMenuItemInfoW
EnableScrollBar
GetUserObjectInformationA
CharUpperW
EnumWindows
LoadIconA
SetActiveWindow
GetSystemMenu
PostThreadMessageA
GetMenuItemRect
DefDlgProcA
ArrangeIconicWindows
InternalGetWindowText
EnumThreadWindows
DestroyCursor
InvalidateRgn
GetKeyboardLayoutNameW
GetDialogBaseUnits
LoadAcceleratorsW
TranslateMessage
GetCaretPos
SetCursor
RegisterClassExA
GetClassInfoW
ShowWindow
OpenInputDesktop
RedrawWindow
InsertMenuItemW
ShowCursor
CreateIconFromResource
TrackPopupMenu
SendNotifyMessageW
DialogBoxIndirectParamW
CreateMenu
SetWindowLongW
IntersectRect
FindWindowW
CallWindowProcA
RegisterClassExW
MessageBoxExW
GetWindowDC
CloseDesktop
PostThreadMessageW
CreateWindowExA
SetForegroundWindow
GetNextDlgTabItem
ChildWindowFromPoint
CreateIconIndirect
DestroyMenu
GetDlgItemTextA

kernel32

LockFile
WaitForSingleObject
DeleteAtom
GlobalMemoryStatusEx
QueryDosDeviceW
SetCurrentDirectoryA
SetCommMask
LCMapStringA
WaitCommEvent
HeapLock
LocalReAlloc
SetCommBreak
VirtualQuery
GlobalAddAtomA
LoadLibraryA
FindResourceExA
GetFullPathNameA
GetProcAddress
CreateWaitableTimerW
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemTimeAsFileTime
lstrcatA
CompareStringW
FindCloseChangeNotification
GetModuleFileNameW
GlobalReAlloc
CallNamedPipeW
GetTimeZoneInformation
lstrcatW
SetTimerQueueTimer
OpenEventA
GlobalAddAtomW
CompareStringA
CancelWaitableTimer
GetFileAttributesExA
FormatMessageA
ResetEvent
GetLocaleInfoA
CopyFileA
GetVersion
CopyFileW
GetCommConfig
lstrlenW
SetPriorityClass
lstrcmpW
GetFileAttributesA
GetCommTimeouts
GlobalFlags
OpenFileMappingW
SetLastError
SetCommTimeouts
RaiseException
GetTickCount
CreateMailslotW
lstrlenA

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d63fcb8d21e14ecfa821276bad7717ef

Headers

File Characteristics

PDB Paths

Imports

msvcrt

user32

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 258KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 138KB - Virtual size: 138KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 258KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 138KB - Virtual size: 138KB

.reloc
Size: 1KB - Virtual size: 1KB