a8912d6ecb084dec6ae2433c0422627a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a8912d6ecb084dec6ae2433c0422627a_JaffaCakes118
Size

146KB
MD5

a8912d6ecb084dec6ae2433c0422627a
SHA1

55f00aefceb801bb18303faccb4df06fa726a3d1
SHA256

e4851dfc9323f3016c3e1dc3de58700ed735f25ab257626d34a3d8369700bc06
SHA512

0b68a399f289a1d0ab355458c3a2b1e1a68750ef9997afe2ad8be15313bfb051631b1773043a5895b4652388f0803bf0709f4edbc229b22015dff7634f9ba890
SSDEEP

3072:D4/OYfwm4LH3dDrw0MXkdzbWo2yx40VhpJe4LH/EUt:DBtDrhM09yo2IfphLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8912d6ecb084dec6ae2433c0422627a_JaffaCakes118

Files

a8912d6ecb084dec6ae2433c0422627a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0cc1a303846e4ba95c587890a71d481

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Y:\sXqpGqvka\TapMvMralk\sagpxgkkb\ihTdehT.pdb

Imports

kernel32

GlobalMemoryStatus
HeapLock
GlobalAlloc
ClearCommError
HeapFree
HeapCreate
CopyFileA
GetSystemDirectoryA
WaitForMultipleObjects
SetSystemTimeAdjustment
GlobalMemoryStatusEx
lstrcmpiW
GlobalAddAtomW
FlushViewOfFile
DeleteFileW
GetLongPathNameW
FindNextChangeNotification
CreateFileA
RegisterWaitForSingleObject
lstrcpynA
SetCurrentDirectoryA
OpenFileMappingA
Sleep
LoadResource
SetCommBreak
MoveFileExW
HeapValidate
GlobalDeleteAtom
WaitForMultipleObjectsEx
CreateFileMappingA
CreateMutexA
HeapWalk
CompareFileTime
GetProcessHeap
GlobalLock
GetLocaleInfoA
SetThreadExecutionState
CreateEventA
lstrlenW
GlobalSize
GetOverlappedResult
GetSystemWindowsDirectoryA
ConvertDefaultLocale
GetCompressedFileSizeW
CreateNamedPipeW
GetModuleHandleA
GetThreadContext
GetLastError
ExitThread
TlsFree
GetComputerNameExW
GetUserDefaultLangID
CreateWaitableTimerA
CallNamedPipeW
GetBinaryTypeW
HeapAlloc
GetPriorityClass
GetModuleFileNameA

msvcrt

strerror
_controlfp
towlower
strncmp
__set_app_type
wcstombs
mbstowcs
time
wcscmp
fclose
__p__fmode
mktime
bsearch
__p__commode
fgets
strncpy
strchr
wcsncpy
wcscat
wcstod
_amsg_exit
swscanf
wcsncmp
gets
qsort
strspn
_initterm
_ismbblead
wcslen
_XcptFilter
_exit
_cexit
ungetc
__setusermatherr
sprintf
strpbrk
srand
rand
remove
perror
puts
__getmainargs
atoi
clock
wcscoll
towupper
setvbuf

comctl32

ImageList_Draw
CreateStatusWindowW
ImageList_ReplaceIcon
CreateToolbarEx
ImageList_Create
ImageList_GetIcon

user32

FindWindowW
GetLastActivePopup
SetMenuItemBitmaps
FindWindowExW
AdjustWindowRect
MonitorFromRect
ScrollWindow
GetSysColor
CreateDialogParamW
EnableScrollBar
CharLowerBuffW
OpenDesktopW
ActivateKeyboardLayout
SetTimer
HideCaret
CloseDesktop
CharUpperA
DialogBoxParamA
InvalidateRect
SetScrollPos
GetDCEx
GetMessageA
RegisterClassA
ExitWindowsEx
GetAsyncKeyState
GetKeyboardLayoutList
LoadIconA
InsertMenuA
BeginDeferWindowPos
GetKeyNameTextW
GetWindowDC
CreateWindowExA
TranslateAcceleratorA
SetActiveWindow
SetDlgItemTextA
OemToCharBuffA
ChildWindowFromPoint
AttachThreadInput
IsDlgButtonChecked
MoveWindow
GetParent
GetCaretPos
CreateDialogIndirectParamW
GetMenuCheckMarkDimensions
DefWindowProcA
MapVirtualKeyA
SetCursorPos
CallWindowProcA
DispatchMessageA
IsChild
SetMenu
WaitMessage
InternalGetWindowText
SetClassLongW
SetWindowPlacement
FrameRect
SendDlgItemMessageA
IsCharAlphaW
LoadAcceleratorsW
SetWindowRgn
GetMenuStringW
GetShellWindow
DrawFrameControl
IsWindowUnicode
SetDlgItemTextW
GetWindowPlacement
LoadBitmapW
LoadIconW
CascadeWindows
EnumWindows
CharNextA
MessageBoxExA
DragObject
wsprintfW
GetDlgItemTextW
CreateIconIndirect
LookupIconIdFromDirectory
RegisterClassExA
LoadStringA
GetClassNameW
GetFocus
WindowFromPoint
GetUpdateRgn
CharUpperW
IsCharUpperA
GetMenuItemID
GetSysColorBrush
SwitchToThisWindow
AdjustWindowRectEx
SetWindowLongW
MonitorFromPoint
GetPropW
RegisterClassW
IsCharAlphaA
DefFrameProcA
KillTimer
IsIconic
ClipCursor
MapDialogRect
GetGUIThreadInfo
GetMonitorInfoW
DrawIcon
VkKeyScanW
SetPropW
AppendMenuW
DefFrameProcW
DrawEdge
DrawStateW
GetMenuState
TranslateMessage
TrackPopupMenuEx
GetClassInfoW
GetCursorPos
LoadCursorW
SendMessageA
GetMessageTime
CreateIconFromResource
GetForegroundWindow
GetTopWindow
DrawStateA
wvsprintfW

Exports

Exports

?DialogReactivateIns@@YGK_KHE[D

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0cc1a303846e4ba95c587890a71d481

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

comctl32

user32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 15KB - Virtual size: 94KB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 15KB - Virtual size: 94KB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 1KB - Virtual size: 1KB