adbca522c7563eb88648c4de51446bf0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

adbca522c7563eb88648c4de51446bf0_JaffaCakes118
Size

762KB
MD5

adbca522c7563eb88648c4de51446bf0
SHA1

8fb09ab7a5cb8c20137718352ef68391507970da
SHA256

69bd063c603d2c821f7161186c5a4e803801b054922ef25ca7005858f2ee19a2
SHA512

e905e8d0298eb5f81a382faa671589a0ff000cbf7a43fe8dabfbd3e6e461ef88f835003f35a40081e693f090a6eba81cf4aa946caf313070f50722df7d9feb16
SSDEEP

12288:sNe+QHANJC6CwMcuLg0uWSFf51HbcrUVRvFaWmbuM7i/8f7+:sNejaCHceLuppcrYFxiz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adbca522c7563eb88648c4de51446bf0_JaffaCakes118

Files

adbca522c7563eb88648c4de51446bf0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f5e2d080b5a4ec9b64613450916f621e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Y:\BkphoSmU\WoFtecwYU\furqBvxCV\TxesdHbn.pdb

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
strcspn
setvbuf
_acmdln
exit
strrchr
strchr
_ismbblead
_XcptFilter
puts
_exit
strtoul
wcstok
mbstowcs
_cexit
clock
wcsrchr
__setusermatherr
isdigit
setlocale
islower
__getmainargs

comdlg32

ReplaceTextW
GetFileTitleW

comctl32

CreateToolbarEx
ImageList_GetIcon
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_LoadImageW

user32

SetPropW
LoadCursorW
MapVirtualKeyW
DispatchMessageA
KillTimer
CreatePopupMenu
AppendMenuW
SetActiveWindow
LoadImageW
TrackPopupMenuEx
SetScrollPos
GetUserObjectInformationA
DrawMenuBar
IsDialogMessageA
CheckRadioButton
GetClassLongA
RedrawWindow
IsIconic
InflateRect
GetSubMenu
GetMenu
GetDoubleClickTime
CreateDialogIndirectParamW
InSendMessage
MessageBoxW
FindWindowExA
GetDlgItem
LockWindowUpdate
SetTimer
LoadAcceleratorsW
DestroyIcon
OffsetRect
DestroyCaret
GetUpdateRect
GetFocus
mouse_event
ShowCursor
FindWindowW
GrayStringW
MapDialogRect
IsWindowUnicode
IsWindowVisible
CascadeWindows
PostMessageW
DrawEdge

kernel32

FindFirstFileA
GetModuleFileNameA
lstrcmpW
GetTempPathW
SetHandleInformation
CancelWaitableTimer
HeapCreate
CreateSemaphoreA
CreateDirectoryW
VerifyVersionInfoW
CreateWaitableTimerW
GetModuleHandleA
GetTickCount
LocalAlloc
GetOEMCP
LocalUnlock
WaitForMultipleObjectsEx
OpenEventW
GetFileAttributesA
GlobalCompact
CreateNamedPipeA
GetSystemDirectoryA

shlwapi

StrToIntExW
StrStrIA

gdi32

GetTextExtentPointW
StartDocW
IntersectClipRect
RectInRegion
CreateRectRgnIndirect
CreateCompatibleBitmap
SetWindowExtEx
EnumFontFamiliesExW
CreateBitmapIndirect
EndPath
GetTextCharsetInfo
PolyBezier
ScaleWindowExtEx
SetBkColor
GetNearestPaletteIndex
CreateFontA
DPtoLP
LineDDA

Exports

Exports

?GeneratePenW@@YGXPAFNPAH~U
?InstallOption@@YGPAFH~U
showtitle
?FormatKeyNameOld@@YGPAMME~U
?KillDeviceEx@@YGGMPAJJ~U
?FreeFunctionA@@YGXFPAGPAI~U
?CopyClassA@@YGE_NJPAJJ~U
?InsertMainStructDlhSi@@YGKGH@Z
?SetScreenOld@@YGIPAGPANPAIPAD~U
?DecrementModuleExW@@YGE_NF~U
?InsertKeyNameOld@@YGGPAD~U

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.redt
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rimp
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdbg1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rit
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdbg2
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rvar
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rpt
Size: 1024B - Virtual size: 637B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ping
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 729KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5e2d080b5a4ec9b64613450916f621e

Headers

File Characteristics

PDB Paths

Imports

msvcrt

comdlg32

comctl32

user32

kernel32

shlwapi

gdi32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.redt Size: 512B - Virtual size: 484B

.rimp Size: 3KB - Virtual size: 2KB

.rdbg1 Size: 512B - Virtual size: 28B

.data Size: 2KB - Virtual size: 1KB

.rit Size: 1024B - Virtual size: 544B

.rdbg2 Size: 512B - Virtual size: 69B

.rvar Size: 512B - Virtual size: 44B

.rpt Size: 1024B - Virtual size: 637B

.hdata Size: 512B - Virtual size: 268B

.ping Size: - Virtual size: 1.3MB

.rsrc Size: 729KB - Virtual size: 729KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.redt
Size: 512B - Virtual size: 484B

.rimp
Size: 3KB - Virtual size: 2KB

.rdbg1
Size: 512B - Virtual size: 28B

.data
Size: 2KB - Virtual size: 1KB

.rit
Size: 1024B - Virtual size: 544B

.rdbg2
Size: 512B - Virtual size: 69B

.rvar
Size: 512B - Virtual size: 44B

.rpt
Size: 1024B - Virtual size: 637B

.hdata
Size: 512B - Virtual size: 268B

.ping
Size: - Virtual size: 1.3MB

.rsrc
Size: 729KB - Virtual size: 729KB

.reloc
Size: 2KB - Virtual size: 1KB