b786e0d8ed71bf64500f298df0b7401f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b786e0d8ed71bf64500f298df0b7401f_JaffaCakes118
Size

172KB
MD5

b786e0d8ed71bf64500f298df0b7401f
SHA1

4d698acc28846bdf2c6f2eff978e1e19b89b9c6f
SHA256

c60b39e27df13f8fdc2f24162afbaf80ff7eb8dd8547c9b917d42b38ceb3d2f3
SHA512

c712f58d2808b8dd5d2571b9cd36cbff4b30b2f1c24672aee9eb8ec4d19d27fdb74a82d723188e615147a5ee3f2bef738a3406ef31f0599a4122597c145aae04
SSDEEP

3072:LdLw5g3qoW7dpjzhQ1nwBFe3VBPLdgipZbH4VrgBiYWiX7XZhRmxBO0c10/DloJ+:Bwq3qL7dBtQQefxTL4Vrb/ALf8rOd0xX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b786e0d8ed71bf64500f298df0b7401f_JaffaCakes118

Files

b786e0d8ed71bf64500f298df0b7401f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fc239a6039044bbd02d9d510b7c0c66e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\oQxUvrcVuaV\omHGhxQDlvq\jpxallHg\jJrbTmRbGmPcFw\pjIEfUlEMuwvI.pdb

Imports

msvcrt

_controlfp
system
isprint
atol
strcspn
mbstowcs
strcoll
printf
towlower
time
fgetc
__set_app_type
__p__fmode
isalnum
strtok
wcscat
mbtowc
__p__commode
sscanf
_amsg_exit
_initterm
putchar
localtime
fclose
ungetc
wcsncpy
rand
_ismbblead
swscanf
iswxdigit
wcsncmp
isupper
_XcptFilter
_exit
vswprintf
_cexit
bsearch
strcpy
__setusermatherr
__getmainargs
clearerr
wcscpy
strtoul
perror

kernel32

SetUnhandledExceptionFilter
GetFileAttributesExA
FindFirstChangeNotificationW
CallNamedPipeW
IsValidLocale
FindNextChangeNotification
SetThreadExecutionState
GetPriorityClass
FindNextFileW
WaitForMultipleObjectsEx
SetNamedPipeHandleState
GetLastError
GlobalFree
GetModuleHandleA
ReadFile
GetCPInfo
SetMailslotInfo
GetLocaleInfoA
LoadLibraryExA
GetTimeFormatA
GetLocaleInfoW
lstrcatW
GetFullPathNameA
OpenFileMappingW
IsBadStringPtrW
CreateEventA
UnlockFile
EnterCriticalSection
TlsGetValue
HeapCreate
Sleep
FoldStringW
VerSetConditionMask
WinExec
CreateThread
CreateFileMappingW
CompareStringW
DefineDosDeviceW
CreateSemaphoreA
SearchPathW
CancelIo
LeaveCriticalSection
GetStartupInfoW
IsValidLanguageGroup
SetCommTimeouts
SystemTimeToFileTime
MoveFileExA
lstrcmpiA
GetStringTypeExW
CreateMutexA

gdi32

GetROP2
DPtoLP
SetDIBits
EnumFontFamiliesW
CreateICW
GetSystemPaletteEntries
CreateRectRgn
GetMapMode
CreateHalftonePalette
SetPaletteEntries
CreateDiscardableBitmap
ExtTextOutW
TextOutW
GetFontData
GetDIBColorTable
Polyline
GetTextFaceW
GetTextAlign
CreateBrushIndirect
GetBkMode
GetLayout
CreateSolidBrush
EnumFontFamiliesExW
CreateBitmapIndirect
CreateBitmap
CreatePen
CreateDIBSection
CombineRgn
GetNearestPaletteIndex
Ellipse
GetTextMetricsA
RealizePalette
UnrealizeObject
SetTextColor
EndDoc
GetSystemPaletteUse
SetDIBitsToDevice
SetDIBColorTable
SetAbortProc
ResizePalette
WidenPath
ExcludeClipRect
CreateEllipticRgnIndirect
RemoveFontResourceW
CreateDCW
CreatePolygonRgn
GetViewportOrgEx

user32

DestroyCaret
DrawFocusRect
LoadImageW
WaitMessage
DestroyMenu
DrawAnimatedRects
DefDlgProcW
ActivateKeyboardLayout
SetTimer
GetWindowTextA
SendInput
LockWindowUpdate
WaitForInputIdle
SetMenu
GetMenu
RegisterWindowMessageW
GetScrollPos
MessageBoxExA
IsChild
GetUpdateRgn
LoadMenuA
AppendMenuW
CreateIconIndirect
GetWindowLongA
GetWindowTextLengthW
CheckRadioButton
InflateRect
TrackPopupMenu
ReleaseDC
SendMessageW
MoveWindow
DrawFrameControl
LoadCursorA
SetUserObjectInformationW
CreatePopupMenu
SetClassLongW
CreateWindowExW
IsIconic
InsertMenuItemW
OffsetRect
LoadCursorW
AdjustWindowRectEx
GetWindowTextW
GetDlgCtrlID
WindowFromPoint
InsertMenuA
SystemParametersInfoW
GetMenuItemCount
VkKeyScanW
RegisterClassExA
EndDialog
CloseDesktop
IsDialogMessageW
OpenDesktopW
ScrollWindowEx
IsWindow
CharToOemW
SetCaretPos
GetKeyboardType
PeekMessageW
GetWindow
CreateDialogParamW
SetWindowTextW
DestroyAcceleratorTable
GetClassInfoExA
GetWindowLongW
EqualRect
SetScrollPos
IsWindowUnicode
KillTimer
InSendMessageEx
CreateIconFromResource
CopyAcceleratorTableW
DefWindowProcA
keybd_event
EnumWindows
GetDoubleClickTime
DestroyWindow
CharPrevA
SendMessageA
DefFrameProcA
RegisterHotKey
SetCursor
GetWindowDC
SetDlgItemInt
CascadeWindows
GetMenuItemID
DialogBoxParamA
SwitchToThisWindow
CheckMenuRadioItem
MapDialogRect
PtInRect
IsDlgButtonChecked
wsprintfA
GetSystemMenu
RegisterClassExW
CreateMenu
GetClassLongA
GetMenuItemInfoW
LoadMenuW
GetTopWindow
GetPropW
SetCursorPos
MapVirtualKeyExW
ShowCaret
RegisterClassW
LoadIconA
GetCaretPos
ShowCursor
GetSubMenu
LookupIconIdFromDirectory

shell32

ord524

Exports

Exports

?HidePointerOriginal@@YGFKPAIPAD<V

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc239a6039044bbd02d9d510b7c0c66e

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

gdi32

user32

shell32

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 111KB

.data Size: 57KB - Virtual size: 77KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 111KB - Virtual size: 111KB

.data
Size: 57KB - Virtual size: 77KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB