b0208aed57286c0970328d2121a3bcd2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b0208aed57286c0970328d2121a3bcd2_JaffaCakes118
Size

147KB
MD5

b0208aed57286c0970328d2121a3bcd2
SHA1

66b1e4752e9e0890059dd534c5b4f5b5c87b2777
SHA256

591682d3b46900d4fae4e5913b592ac4dae976442588fa6befd9cd54a699cc26
SHA512

610cdab53022a1e87f218d4bf8d7c29fa4153ce7a46872dfbb8b11a79fa755c8a7942c00bba8da06e9d42b42c1f29e2a9613d12869e67ce061c60f4e10c821ab
SSDEEP

3072:eXi7yssNOl23aVTioy2XJLKxagNS+al6622aX83vuxANAI:EssNfaVOoXZ4PN+lMniuxAN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0208aed57286c0970328d2121a3bcd2_JaffaCakes118

Files

b0208aed57286c0970328d2121a3bcd2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c23c828258e6ffb9e9dce5fc3e28e793

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\ocflaKkCYbmb\tlldjzhcfG\velZciEbyfvxw\ViXoRezMjnZw.pdb

Imports

msvcrt

setvbuf
_controlfp
iswalpha
strpbrk
strcpy
atoi
__set_app_type
fseek
ftell
wcsncpy
isdigit
putchar
realloc
__p__fmode
puts
wcschr
__p__commode
strrchr
isprint
fwrite
_amsg_exit
_initterm
setlocale
iswprint
wcstombs
_acmdln
exit
islower
swprintf
_ismbblead
wcspbrk
_XcptFilter
_exit
calloc
strncmp
strtoul
wcstok
mbtowc
tolower
fgetc
strstr
_cexit
fread
__setusermatherr
wcsrchr
__getmainargs
iswspace
atol
strchr

gdi32

MoveToEx
GetTextExtentPointW
EnumFontFamiliesW
WidenPath
RoundRect
CombineRgn
SelectPalette
GetCurrentObject
SetDIBits
SetBitmapDimensionEx
SaveDC
SetStretchBltMode
SelectObject
CreateDIBSection
Ellipse
GetDIBits
GetTextColor
SetTextColor
ScaleViewportExtEx
CreateBitmapIndirect
ExtTextOutA
EndPage
CreateFontIndirectA
GetTextExtentExPointW
RestoreDC
CreatePolygonRgn
GetTextExtentPoint32W
RectVisible
SetROP2
StretchDIBits
CreatePalette
GetSystemPaletteEntries
SetViewportExtEx
CreateDCW
PtVisible
PtInRegion
FillRgn
CreateCompatibleBitmap
Polygon
RealizePalette
CreateDIBitmap
SetTextAlign
GetStockObject
StartDocW
PatBlt
GetObjectA
CreateFontIndirectW
CreatePen
SetMapMode
GetCharWidth32W
GetTextFaceW

kernel32

GetShortPathNameA
FreeLibrary
GetAtomNameW
GetFileAttributesW
TlsSetValue
CreateMailslotW
GetComputerNameExA
FindNextChangeNotification
GetCurrentDirectoryW
GlobalDeleteAtom
GetModuleHandleA
CreateDirectoryW
GetCommandLineA
VirtualFree
GlobalLock
GlobalSize
HeapReAlloc
GetTickCount
OpenFileMappingW
FindFirstFileW
HeapUnlock
LocalFree
GlobalAddAtomW
CreateSemaphoreW
EnumResourceNamesA
TlsFree
GetOverlappedResult
CreateFileMappingW
IsBadWritePtr
SetPriorityClass
GetCommConfig
IsDBCSLeadByte
SetCurrentDirectoryA
MapViewOfFile
GetTempPathA
GetThreadTimes
GetPriorityClass
GetFullPathNameW
HeapWalk
lstrcmpW
GetProcAddress
CancelWaitableTimer
GetModuleFileNameW
GlobalFindAtomW
LocalSize
RemoveDirectoryW
GetThreadContext
LoadLibraryA
SetThreadAffinityMask
CreateMutexA
WaitForSingleObject
SetupComm
LockFile
LeaveCriticalSection
SetFileTime
LockResource
FlushViewOfFile

shlwapi

StrChrIA

user32

AppendMenuW
ScreenToClient
AdjustWindowRect
IsCharAlphaNumericW
WaitMessage
FindWindowExA
CloseDesktop
keybd_event
IsDlgButtonChecked
GetKeyboardLayout
SetWindowRgn
GetScrollRange
DrawTextW
GetFocus
MapDialogRect
LoadIconW
SetDlgItemTextW
GetClientRect
GetMessageTime
SetTimer
GetClassInfoExW
InvalidateRgn
DialogBoxParamW
UpdateWindow
DrawMenuBar
IsCharUpperA
CharToOemW
DefDlgProcW
DragObject
RemoveMenu
GetWindowTextW
SetScrollRange
GetCursorPos
OpenDesktopW
DeferWindowPos
KillTimer
CharNextExA
CreateCaret
PostQuitMessage
GetMenuItemRect
GetTopWindow
SendMessageTimeoutW
SetWindowPos
GetMonitorInfoW
DestroyCaret
RegisterWindowMessageW
DrawFocusRect
GetClipCursor
SwitchToThisWindow
ValidateRect
IsWindowUnicode
IsWindow
GetUserObjectInformationA
GrayStringW
GetWindowLongA
ShowOwnedPopups
MessageBoxA
RegisterClassA
GetDialogBaseUnits
BeginDeferWindowPos
CharToOemBuffA
EndPaint
CheckDlgButton
GetKeyState
IsWindowVisible
PostThreadMessageA
WaitForInputIdle
GetMenuState
wvsprintfA
CharUpperBuffW
SetDlgItemInt
SetMenuItemBitmaps
DrawTextA
CharNextW
DialogBoxIndirectParamA
LockWindowUpdate
IntersectRect
DestroyAcceleratorTable
IsWindowEnabled
MonitorFromPoint
DestroyMenu
DestroyWindow
UnionRect
EnumWindows
DrawAnimatedRects
GetSysColor
SetWindowLongW
SetCursor
OemToCharA
SetFocus
DefFrameProcA
CharToOemA
MapWindowPoints
GetDoubleClickTime
AllowSetForegroundWindow
GetClassLongW
GetNextDlgGroupItem
DestroyCursor
ChildWindowFromPointEx
SetUserObjectInformationW
CreateDialogParamW
GetClassInfoA
IsDialogMessageA
CharPrevW
ReleaseDC
IsMenu
ShowCursor
GetClassNameW
EqualRect
GetDC
DialogBoxParamA
SetCursorPos
OpenIcon
RegisterClassExA
GetMessagePos
VkKeyScanW
CharUpperBuffA
LoadBitmapA
GetKeyboardType
GetSubMenu
GetMessageA

Exports

Exports

?ExecuteLoaderTrayXBwyGD@@YGKGHE@Z
?IsValidHeader@@YGPAJHPAKH~U
?DeleteTimerEx@@YGGG~U
?KillKeyName@@YGPAXMIE~U

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ticx
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c23c828258e6ffb9e9dce5fc3e28e793

Headers

File Characteristics

PDB Paths

Imports

msvcrt

gdi32

kernel32

shlwapi

user32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.ticx Size: 6KB - Virtual size: 6KB

.zdata Size: 1024B - Virtual size: 716B

.data Size: 3KB - Virtual size: 131KB

.rsrc Size: 112KB - Virtual size: 111KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.ticx
Size: 6KB - Virtual size: 6KB

.zdata
Size: 1024B - Virtual size: 716B

.data
Size: 3KB - Virtual size: 131KB

.rsrc
Size: 112KB - Virtual size: 111KB

.reloc
Size: 2KB - Virtual size: 1KB