bab4aadbd94c55715ea9002297c031e3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bab4aadbd94c55715ea9002297c031e3_JaffaCakes118
Size

45KB
MD5

bab4aadbd94c55715ea9002297c031e3
SHA1

d98efc8b82b819acd0e9016e18ff592b4af65a38
SHA256

f5998e268492d796962098174b3d73a0e8527a60744c24fa1eda8cf15d69681f
SHA512

145c2ab286e35e3b56715f4130092e38110de2c1fe72c0e634354f1ae8fcf42d5465bc759a2a375e88c4c096a51acb82adaa33e3981dcf7f5691089a0e76e121
SSDEEP

768:UKDJoOx5wxMYWFQGNo+ww9tr4cMECAp3u9aec:UmpCsGwHk2vp3sal

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab4aadbd94c55715ea9002297c031e3_JaffaCakes118

Files

bab4aadbd94c55715ea9002297c031e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3095161a3eb911bf604f72735ee483dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\zOhgBoKbryqSJ\kxvIwjjyqk\POMjnzsc\xqinBQsUp.pdb

Imports

comctl32

PropertySheetW
ImageList_Read
CreatePropertySheetPageA
CreateToolbarEx
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

StrToIntW

kernel32

SetMailslotInfo
HeapReAlloc
GetSystemDefaultUILanguage
CompareStringA
MoveFileA
GlobalGetAtomNameA
CreatePipe
FindFirstFileA
GetThreadPriority
GetBinaryTypeW
OutputDebugStringA
GlobalReAlloc
GlobalGetAtomNameW
GlobalUnlock
GetDateFormatA
GetComputerNameW
SetFileTime
LoadLibraryA
GetThreadLocale
SetFilePointer
SearchPathW
CreateNamedPipeA
SetThreadAffinityMask
UnlockFile
GetFileAttributesW
TlsFree
ReleaseMutex
CopyFileA
SleepEx
SetCommMask
LocalLock
HeapLock
GetOverlappedResult
GetLongPathNameW
RegisterWaitForSingleObject
QueryPerformanceCounter
GetShortPathNameW
LoadLibraryExW
GetExitCodeThread
DeleteFileA
GetThreadTimes
SetLocalTime
GetNumberFormatA
CreateWaitableTimerW
lstrcpynW
FileTimeToLocalFileTime
ExitThread
GetPriorityClass
RemoveDirectoryA
ReadFile
ReleaseSemaphore
SetErrorMode
GetSystemWindowsDirectoryW
lstrcmpiA
FoldStringW
GetFileSize

msvcrt

free
vswprintf
iswspace
perror
_controlfp
islower
strtol
atol
calloc
__set_app_type
__p__fmode
vsprintf
__p__commode
getc
_amsg_exit
_initterm
wcstombs
strspn
clock
wcslen
_ismbblead
toupper
_XcptFilter
rand
putc
fwrite
iswalpha
isxdigit
clearerr
_exit
fgets
fclose
_cexit
localtime
__setusermatherr
wcscmp
__getmainargs
wcstol
mktime
wcsncmp
isspace
strcspn
wcstoul
gets
strstr
wcsncpy
remove

user32

IsZoomed
ReplyMessage
GetKeyNameTextW
SetCursorPos
SetForegroundWindow
InvalidateRgn
GetDialogBaseUnits
PostThreadMessageA
DrawTextExW
CharPrevW
CreateDialogParamW
GetClassNameW
GetNextDlgTabItem
GetDlgCtrlID
CreateWindowExA
WaitForInputIdle
GetMenuCheckMarkDimensions
OpenIcon
SetActiveWindow
ShowCaret
CopyImage
DialogBoxParamW
DefWindowProcA
GetClassInfoW
DeleteMenu
MonitorFromRect
LoadBitmapA
GetNextDlgGroupItem
GetDCEx
GetAsyncKeyState
SendDlgItemMessageA
CharToOemA
SetWindowPlacement
MapWindowPoints
MessageBoxW
SetParent
CharUpperA
GetMessageTime
ShowWindowAsync
OemToCharA
DefFrameProcW
IsDlgButtonChecked
wvsprintfW
GetMenuItemID
SetWindowLongA
DrawFocusRect
GetShellWindow
BeginDeferWindowPos
SendNotifyMessageW
AllowSetForegroundWindow
GetScrollRange
CreateWindowExW
CloseDesktop
InsertMenuA
ShowScrollBar
SetFocus
GetClassInfoExW
GetCursorPos
ClientToScreen
GetLastActivePopup
HiliteMenuItem
GetWindowLongA
SetMenuItemInfoW
CallWindowProcA
DrawFrameControl
PostThreadMessageW
CharNextA
SystemParametersInfoW
GetScrollPos
GetActiveWindow
EnableMenuItem
LoadMenuW
GetDlgItemTextW
MessageBoxExA
LoadCursorW
GetSubMenu
SetRectEmpty
SetWindowTextA
CreateAcceleratorTableW
MonitorFromPoint
TrackPopupMenu
MapDialogRect
SetDlgItemInt
ChangeMenuW
LoadCursorA
CharPrevA
GetClientRect
EnumWindows
PostQuitMessage
GetScrollInfo
CheckDlgButton
ScreenToClient
BeginPaint
DefDlgProcW
IsCharAlphaW
SetPropW
IsWindowUnicode
GetMenuState
InsertMenuItemW
ShowWindow
GrayStringW
CopyAcceleratorTableW
GetKeyboardLayoutNameW
DialogBoxIndirectParamW
keybd_event
CheckRadioButton
EqualRect
CheckMenuRadioItem
GetDlgItemTextA
LoadIconW
GetSysColorBrush
PostMessageW
DrawEdge
SwitchToThisWindow
IsDialogMessageW
ShowCursor
VkKeyScanW
GetWindowDC

Exports

Exports

?RedirectOutput@@YGK_KHE:O

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itab
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.etab
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.input
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3095161a3eb911bf604f72735ee483dc

Headers

File Characteristics

PDB Paths

Imports

comctl32

shlwapi

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.itab Size: 6KB - Virtual size: 5KB

.etab Size: 512B - Virtual size: 85B

.input Size: 512B - Virtual size: 128B

.data Size: 2KB - Virtual size: 111KB

.rsrc Size: 167KB - Virtual size: 167KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.itab
Size: 6KB - Virtual size: 5KB

.etab
Size: 512B - Virtual size: 85B

.input
Size: 512B - Virtual size: 128B

.data
Size: 2KB - Virtual size: 111KB

.rsrc
Size: 167KB - Virtual size: 167KB

.reloc
Size: 1KB - Virtual size: 1KB