b07fb975702cef437a44e10721008a09_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b07fb975702cef437a44e10721008a09_JaffaCakes118
Size

219KB
MD5

b07fb975702cef437a44e10721008a09
SHA1

78b191e75f13a5e0f88b10cd3712f890518198ab
SHA256

ce1e3c5e864b7b914b22fb55117f5dc13b0a4561491532afb74bb7f7e62d3692
SHA512

4923b6dc5b7aae1f7d70a1b0b0d7dad37c3b249a3b459e457af2145c759c1a2f25768e75eca6068ead35bc4f6ff7f5ffddc74b6608b9dbfe10da1ccb810f1e3f
SSDEEP

6144:ZLVcMGjsM3EfzqHwk3iYWa85B6HphYrCE:qjDvHwky/ev6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07fb975702cef437a44e10721008a09_JaffaCakes118

Files

b07fb975702cef437a44e10721008a09_JaffaCakes118
.exe windows:5 windows x86 arch:x86

11f02bc77222f1d5ba5cca1eac19120a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\rjAzTzjxCxqbp\nksmzeAjbViHh\jounitS\fvxxoslbQyt.pdb

Imports

msvcrt

putc
fseek
_controlfp
setlocale
__set_app_type
__p__fmode
mktime
strstr
wcsrchr
vswprintf
__p__commode
iswdigit
ungetc
strncpy
strncmp
fwrite
_amsg_exit
_initterm
_ismbblead
puts
isalpha
strspn
_XcptFilter
wcstombs
_exit
wcsncpy
floor
calloc
strtol
strcpy
iswspace
wcschr
fread
setvbuf
getenv
iswprint
_cexit
atol
remove
__setusermatherr
srand
iswxdigit
towupper
__getmainargs

comctl32

ImageList_Read
ImageList_GetIcon
ImageList_Create
ImageList_Write
CreateToolbarEx
InitCommonControlsEx

kernel32

HeapFree
GetSystemDirectoryW
CompareFileTime
SetPriorityClass
CreateDirectoryA
LoadResource
GetFileAttributesExW
lstrcmpA
IsDBCSLeadByteEx
SetThreadAffinityMask
SetFilePointer
EnumResourceLanguagesA
GetShortPathNameA
ClearCommError
GetCurrentThreadId
UnlockFile
ExitThread
FreeResource
GetLocalTime
GetModuleHandleA
GetComputerNameExA
CreateEventW
LockFile
FindResourceW
VirtualFree
GlobalFindAtomW
PulseEvent
GetUserDefaultLCID
RemoveDirectoryA
lstrcpynW
GetFileTime
LeaveCriticalSection
CreateEventA
ResumeThread
FindResourceA
WideCharToMultiByte
DeviceIoControl
RaiseException
WriteFile
GetFileAttributesA
GlobalSize
AreFileApisANSI
HeapAlloc
GetBinaryTypeW
HeapLock
CompareStringA
TryEnterCriticalSection
GlobalAddAtomA
CreateRemoteThread
GetOverlappedResult
IsValidLocale
GetTempFileNameA
lstrcpyW
GetProcessHeap

user32

SetClassLongW
GetDlgItemTextW
DrawIcon
ChildWindowFromPoint
CreateCaret
CopyRect
GetMessageExtraInfo
AllowSetForegroundWindow
EnableScrollBar
LoadImageA
mouse_event
SendDlgItemMessageA
DialogBoxIndirectParamA
CreateIconFromResource
TabbedTextOutW
InvalidateRgn
EnableWindow
DestroyAcceleratorTable
EndTask
SetFocus
SetLastErrorEx
MapVirtualKeyExW
IsWindowUnicode
SetCursorPos
MapVirtualKeyA
BringWindowToTop
MonitorFromPoint
FillRect
DrawMenuBar
CheckMenuRadioItem
GetMessageTime
SetParent
TranslateMessage
SwitchToThisWindow
InflateRect
GetSubMenu
PtInRect
SetRect
GetScrollPos
GetSysColorBrush
GetWindowRect
SetRectEmpty
IntersectRect
SetMenuItemBitmaps
FindWindowA
SetDlgItemTextW
GetAsyncKeyState
InSendMessageEx
DrawTextA
DestroyMenu
FindWindowW
GetMenuItemRect
ShowOwnedPopups
LoadCursorW
GetClipCursor
AdjustWindowRectEx
RegisterClassA
RegisterClassExA
InsertMenuItemW
ExitWindowsEx
EndDialog
wsprintfW
RegisterClassExW
GetDC
LoadAcceleratorsW
CharUpperW
OemToCharA
GetMessageA
ValidateRect
CheckRadioButton
EqualRect
GetClassInfoExA
SendMessageTimeoutW
VkKeyScanW
DrawEdge
OpenInputDesktop
GetMenuStringA
SetPropW
DefWindowProcW
ChangeMenuW
ShowCaret
GetScrollInfo
GetNextDlgGroupItem
DeleteMenu
IsWindowEnabled
IsWindowVisible
SendMessageW
RegisterWindowMessageW
GetUpdateRect
wsprintfA
GetClassInfoA
SendDlgItemMessageW
GetMenuState
GetDCEx
DeferWindowPos
SetCaretPos
CheckDlgButton
SetDlgItemTextA
wvsprintfW
GetWindowTextLengthW
CharUpperBuffW
GetCaretPos
DragObject
GetClassInfoW
CharLowerW
GetMenuCheckMarkDimensions
LoadCursorA
SendInput

gdi32

SetWindowOrgEx
SetDIBColorTable
GetLayout
CreateDiscardableBitmap
SelectObject
SetBitmapDimensionEx
GetViewportOrgEx
ExcludeClipRect
GetBitmapBits
CreateSolidBrush
PtVisible
SetLayout
EndDoc
Escape
CreateCompatibleBitmap
GetTextExtentPoint32W
CreateBitmap
ExtTextOutW
SetStretchBltMode
CreateFontIndirectW
GetSystemPaletteEntries
FillRgn
CreateICW
CreatePatternBrush
SelectClipRgn
GetTextColor
EnumFontsW
RectVisible
ExtFloodFill
GetNearestPaletteIndex
EndPath
CreatePolygonRgn
SetRectRgn
EnumFontFamiliesExW
CreateCompatibleDC
CreateDCW
UnrealizeObject
EndPage
PolyBezier
SetWindowExtEx
GetBkMode
SetBkMode
PatBlt
SetAbortProc

psapi

GetProcessImageFileNameW

Exports

Exports

?IsValidDateOriginal@@YGDIPAGIK]A
?IncrementExpressionOriginal@@YGPAKPAKPAFNE]A

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.packed
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11f02bc77222f1d5ba5cca1eac19120a

Headers

File Characteristics

PDB Paths

Imports

msvcrt

comctl32

kernel32

user32

gdi32

psapi

Exports

Exports

Sections

.text Size: 193KB - Virtual size: 192KB

.packed Size: 13KB - Virtual size: 13KB

.data Size: 9KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 193KB - Virtual size: 192KB

.packed
Size: 13KB - Virtual size: 13KB

.data
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB