b52ac8561cc5316ea4ac16c45a23af2e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b52ac8561cc5316ea4ac16c45a23af2e_JaffaCakes118
Size

214KB
MD5

b52ac8561cc5316ea4ac16c45a23af2e
SHA1

215e67265d96ec3aa516c15e8621940ebf619623
SHA256

80485827a082ae4ad5ade120b681b28640cf9daf68a9a0f9a4c2b4b1ae5ce903
SHA512

2ccc85203be1cb62dd6c7c5d70ee08ec342c3365ca6ae1348b1bcbbd9c3b3e3562fb20c3ee7701a6d149b2cb8556f7a053f2618034630e0eeef0f89ea6fd5951
SSDEEP

3072:ZKbCVmd8pOjdzexvR3V8Lghp9m6DXW3mBmq1jI1iTLvgFhSjDc5K04yhENt8vpOB:ZKbVdT9YnLJxDkq1s160qc9KNyvpO/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b52ac8561cc5316ea4ac16c45a23af2e_JaffaCakes118

Files

b52ac8561cc5316ea4ac16c45a23af2e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4a7bbec57e71460f0669805d6887c413

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\oghdyYJAMfik\ZmoalRyxo\stixeazeb.pdb

Imports

shlwapi

ChrCmpIA

msvcrt

fprintf
putchar
clearerr
_controlfp
iswalpha
strcoll
strncmp
fgets
towupper
memset
towlower
__set_app_type
wcsncpy
qsort
strtok
isupper
isxdigit
__p__fmode
setlocale
fread
remove
__p__commode
wcscspn
mbstowcs
strerror
wcspbrk
isprint
calloc
vsprintf
clock
setvbuf
wcscoll
putc
_amsg_exit
floor
sprintf
wcscpy
printf
wcstol
mbtowc
getc
islower
fwrite
srand
puts
_initterm
perror
free
_ismbblead
malloc
_XcptFilter
_exit
fputc
vswprintf
isalpha
ftell
_cexit
__setusermatherr
wcscmp
atoi
__getmainargs

gdi32

CreatePen
CombineRgn
SetAbortProc
SetTextAlign
TextOutA
CreateDiscardableBitmap
PathToRegion
ResizePalette
ExtTextOutW
GetBitmapBits
PatBlt
CreateDIBitmap
SetLayout
GetCurrentObject
DeleteObject
CreateBitmapIndirect
TextOutW
Escape
GetPaletteEntries
StretchBlt
CreateHatchBrush
StretchDIBits
GetCharWidth32W
CreateRectRgn
SetDIBColorTable
RealizePalette
LineDDA
CreateEllipticRgnIndirect
CreateRectRgnIndirect
SaveDC
StartDocW
CreateBitmap
SetROP2
Ellipse
CreateCompatibleBitmap
SetStretchBltMode
CreatePolygonRgn
GetTextAlign
GetFontData
WidenPath
EndDoc
SetPixel
RestoreDC
GetTextCharsetInfo
GetNearestPaletteIndex
CreatePenIndirect
SetViewportExtEx
CreatePatternBrush
CreateCompatibleDC
ExtTextOutA
GetTextMetricsW
EndPath
ScaleWindowExtEx
GetROP2
TranslateCharsetInfo
CreateICW
GetDeviceCaps
GetTextMetricsA
CreateDIBSection
RectVisible
RoundRect
SetWindowOrgEx
BitBlt
EnumFontsW
GetRgnBox
GetDIBits
UnrealizeObject
CreateBrushIndirect
PolyBezier
LPtoDP

user32

GetClassLongW
GetShellWindow
GetMessageExtraInfo
GetDlgCtrlID
CharNextW
ScreenToClient
DrawFocusRect
WindowFromPoint
FillRect
SetWindowTextW
InSendMessage
ReplyMessage
SendDlgItemMessageA
LoadIconA
GetMenuCheckMarkDimensions
FindWindowW
GetWindowLongA
GetWindowRect
EndPaint
ShowScrollBar
RemovePropW
DeleteMenu
GetNextDlgTabItem
GetCaretPos
CharUpperBuffW
ChildWindowFromPoint
SetCursorPos
LoadStringA
DialogBoxIndirectParamW
CreateIconIndirect
LookupIconIdFromDirectory
PtInRect
ScrollWindowEx
DialogBoxParamA
ArrangeIconicWindows
SetFocus
TranslateAcceleratorW
CharNextA
GetDesktopWindow
SendInput
MapWindowPoints
GetMenuStringW
SetTimer
SetScrollRange
SetMenu
TileWindows
RegisterClassW
TranslateMessage
GetMenuItemCount
ClipCursor
LoadAcceleratorsA
MonitorFromPoint
SwapMouseButton
MapVirtualKeyW
MonitorFromRect
SetMenuItemBitmaps
CreateDialogParamA
GetMenuStringA
SendMessageW
CreateCaret
wsprintfW
SetCaretPos
CharPrevA
DrawStateA
GetMenuState
IsDialogMessageW
InsertMenuA
DestroyAcceleratorTable
SetDlgItemTextW
GetKeyNameTextW
RegisterHotKey
LoadAcceleratorsW
ShowWindow
ChangeMenuW
GetKeyboardType
SystemParametersInfoW
AppendMenuA
SetWindowLongA
SendMessageTimeoutW
LoadMenuW
DrawIconEx
InflateRect
CheckDlgButton
LoadCursorA
InsertMenuW
GetWindowTextLengthW
TrackPopupMenuEx
MessageBoxExW
IsWindow
CreateDialogParamW
ScrollWindow
FindWindowExW
wvsprintfW
ModifyMenuW
GetClassNameW
GetMenuItemInfoW
DefDlgProcW
IntersectRect
DispatchMessageW
CheckRadioButton
CharNextExA
LoadBitmapA
ExitWindowsEx
IsCharLowerA
InternalGetWindowText
DrawStateW
GetMessageTime
GetActiveWindow
InvalidateRgn
RegisterWindowMessageA
DrawEdge
ActivateKeyboardLayout
ShowOwnedPopups
GetFocus
SetWindowPlacement
GetAsyncKeyState
MessageBoxW
CreateWindowExW
CharPrevW
DefWindowProcW
GetDialogBaseUnits
CharUpperA
SetDlgItemInt
TrackPopupMenu
OemToCharA
GetSubMenu
GetClassInfoExA
UpdateWindow
InSendMessageEx
SetLastErrorEx
TranslateAcceleratorA
SendMessageA
CreateAcceleratorTableW
EndDialog
SetCursor
GetSysColorBrush
GetWindow
IsZoomed
BringWindowToTop
RegisterClassExW
SwitchToThisWindow
GetWindowLongW
CharToOemA
AttachThreadInput
CreateMenu
GetMenuItemRect
IsMenu
LoadMenuA
GetDlgItemInt
ChildWindowFromPointEx
GetClipCursor
CharToOemBuffA
CallWindowProcW
GetParent
IsDlgButtonChecked
CharUpperW
DefDlgProcA
RegisterClassA
SetWindowPos
SetActiveWindow
IsWindowEnabled
IsCharAlphaW
CascadeWindows
PostThreadMessageA
GetCaretBlinkTime
GetNextDlgGroupItem
GetIconInfo

kernel32

SleepEx
CallNamedPipeW
IsDBCSLeadByteEx
HeapSize
ReleaseSemaphore
GetAtomNameA
GetTickCount
GlobalFindAtomW
DeleteFileA
GetProcAddress
FreeResource
DuplicateHandle
MultiByteToWideChar
EnumResourceLanguagesA
DisconnectNamedPipe
SetFileAttributesA
ClearCommBreak
LocalSize
GetUserDefaultUILanguage
RemoveDirectoryW
ResumeThread
SetCommState
CreateSemaphoreW
GetFileSize
CreateFileW
CreateWaitableTimerA
WideCharToMultiByte
SetEndOfFile
SuspendThread
CreateMutexW
EscapeCommFunction
OpenFile
TlsSetValue
GetCurrentThread
GetModuleFileNameA
GetTimeZoneInformation
RaiseException
GetTempPathA
SystemTimeToFileTime
FindResourceW
SetThreadAffinityMask
GetTimeFormatW
GetLocalTime
CreateMailslotW
IsBadCodePtr
GetFileTime
SizeofResource
LoadLibraryExW
LCMapStringA
LocalUnlock
DeleteCriticalSection
FileTimeToLocalFileTime
OpenFileMappingW
GetOEMCP
CloseHandle
GetSystemDirectoryA
MulDiv
ConnectNamedPipe
HeapValidate
GetFileAttributesA
OpenSemaphoreW
SearchPathA
SetFileAttributesW
GetExitCodeThread
GetCommTimeouts
MoveFileExA
IsBadReadPtr
GetThreadLocale
lstrcmpA
GetPriorityClass
GetModuleHandleA
GetSystemTime
CreateMutexA
UnlockFile
EnumResourceNamesW
GetCommConfig

Exports

Exports

?IsValidPenEx@@IJMHF@X

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a7bbec57e71460f0669805d6887c413

Headers

File Characteristics

PDB Paths

Imports

shlwapi

msvcrt

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 53KB

.code Size: 12KB - Virtual size: 12KB

.data Size: 12KB - Virtual size: 84KB

.rsrc Size: 133KB - Virtual size: 132KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 53KB - Virtual size: 53KB

.code
Size: 12KB - Virtual size: 12KB

.data
Size: 12KB - Virtual size: 84KB

.rsrc
Size: 133KB - Virtual size: 132KB

.reloc
Size: 2KB - Virtual size: 1KB