9694ed2fcb4d5600547bbbdbfa859645_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9694ed2fcb4d5600547bbbdbfa859645_JaffaCakes118
Size

146KB
MD5

9694ed2fcb4d5600547bbbdbfa859645
SHA1

228783808a46690fac8ab319d7b80f43ffd20d70
SHA256

968910c1b38ac514d143bee65ca849efafdad0de0b9a8962974c8ec11ee4dd4d
SHA512

4bc032153e9bac2138c60d2cf040f1260fa04164d57653bce0989508a85507544dc140d2f7e79583dba1c61cd8d3edf84f0ca276e0fd4aed6b0b9e9a61905614
SSDEEP

3072:D4/OYfwm4LH3dDrw0MXkdzbWo2ex40VhpJe4LH/EUt:DBtDrhM09yo2sfphLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9694ed2fcb4d5600547bbbdbfa859645_JaffaCakes118

Files

9694ed2fcb4d5600547bbbdbfa859645_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0cc1a303846e4ba95c587890a71d481

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Y:\sXqpGqvka\TapMvMralk\sagpxgkkb\ihTdehT.pdb

Imports

kernel32

GlobalMemoryStatus
HeapLock
GlobalAlloc
ClearCommError
HeapFree
HeapCreate
CopyFileA
GetSystemDirectoryA
WaitForMultipleObjects
SetSystemTimeAdjustment
GlobalMemoryStatusEx
lstrcmpiW
GlobalAddAtomW
FlushViewOfFile
DeleteFileW
GetLongPathNameW
FindNextChangeNotification
CreateFileA
RegisterWaitForSingleObject
lstrcpynA
SetCurrentDirectoryA
OpenFileMappingA
Sleep
LoadResource
SetCommBreak
MoveFileExW
HeapValidate
GlobalDeleteAtom
WaitForMultipleObjectsEx
CreateFileMappingA
CreateMutexA
HeapWalk
CompareFileTime
GetProcessHeap
GlobalLock
GetLocaleInfoA
SetThreadExecutionState
CreateEventA
lstrlenW
GlobalSize
GetOverlappedResult
GetSystemWindowsDirectoryA
ConvertDefaultLocale
GetCompressedFileSizeW
CreateNamedPipeW
GetModuleHandleA
GetThreadContext
GetLastError
ExitThread
TlsFree
GetComputerNameExW
GetUserDefaultLangID
CreateWaitableTimerA
CallNamedPipeW
GetBinaryTypeW
HeapAlloc
GetPriorityClass
GetModuleFileNameA

msvcrt

strerror
_controlfp
towlower
strncmp
__set_app_type
wcstombs
mbstowcs
time
wcscmp
fclose
__p__fmode
mktime
bsearch
__p__commode
fgets
strncpy
strchr
wcsncpy
wcscat
wcstod
_amsg_exit
swscanf
wcsncmp
gets
qsort
strspn
_initterm
_ismbblead
wcslen
_XcptFilter
_exit
_cexit
ungetc
__setusermatherr
sprintf
strpbrk
srand
rand
remove
perror
puts
__getmainargs
atoi
clock
wcscoll
towupper
setvbuf

comctl32

ImageList_Draw
CreateStatusWindowW
ImageList_ReplaceIcon
CreateToolbarEx
ImageList_Create
ImageList_GetIcon

user32

FindWindowW
GetLastActivePopup
SetMenuItemBitmaps
FindWindowExW
AdjustWindowRect
MonitorFromRect
ScrollWindow
GetSysColor
CreateDialogParamW
EnableScrollBar
CharLowerBuffW
OpenDesktopW
ActivateKeyboardLayout
SetTimer
HideCaret
CloseDesktop
CharUpperA
DialogBoxParamA
InvalidateRect
SetScrollPos
GetDCEx
GetMessageA
RegisterClassA
ExitWindowsEx
GetAsyncKeyState
GetKeyboardLayoutList
LoadIconA
InsertMenuA
BeginDeferWindowPos
GetKeyNameTextW
GetWindowDC
CreateWindowExA
TranslateAcceleratorA
SetActiveWindow
SetDlgItemTextA
OemToCharBuffA
ChildWindowFromPoint
AttachThreadInput
IsDlgButtonChecked
MoveWindow
GetParent
GetCaretPos
CreateDialogIndirectParamW
GetMenuCheckMarkDimensions
DefWindowProcA
MapVirtualKeyA
SetCursorPos
CallWindowProcA
DispatchMessageA
IsChild
SetMenu
WaitMessage
InternalGetWindowText
SetClassLongW
SetWindowPlacement
FrameRect
SendDlgItemMessageA
IsCharAlphaW
LoadAcceleratorsW
SetWindowRgn
GetMenuStringW
GetShellWindow
DrawFrameControl
IsWindowUnicode
SetDlgItemTextW
GetWindowPlacement
LoadBitmapW
LoadIconW
CascadeWindows
EnumWindows
CharNextA
MessageBoxExA
DragObject
wsprintfW
GetDlgItemTextW
CreateIconIndirect
LookupIconIdFromDirectory
RegisterClassExA
LoadStringA
GetClassNameW
GetFocus
WindowFromPoint
GetUpdateRgn
CharUpperW
IsCharUpperA
GetMenuItemID
GetSysColorBrush
SwitchToThisWindow
AdjustWindowRectEx
SetWindowLongW
MonitorFromPoint
GetPropW
RegisterClassW
IsCharAlphaA
DefFrameProcA
KillTimer
IsIconic
ClipCursor
MapDialogRect
GetGUIThreadInfo
GetMonitorInfoW
DrawIcon
VkKeyScanW
SetPropW
AppendMenuW
DefFrameProcW
DrawEdge
DrawStateW
GetMenuState
TranslateMessage
TrackPopupMenuEx
GetClassInfoW
GetCursorPos
LoadCursorW
SendMessageA
GetMessageTime
CreateIconFromResource
GetForegroundWindow
GetTopWindow
DrawStateA
wvsprintfW

Exports

Exports

?DialogReactivateIns@@YGK_KHE[D

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0cc1a303846e4ba95c587890a71d481

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

comctl32

user32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 15KB - Virtual size: 94KB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 15KB - Virtual size: 94KB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 1KB - Virtual size: 1KB