bb562ccc2f121ff7af7d460e6c5f9d11_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bb562ccc2f121ff7af7d460e6c5f9d11_JaffaCakes118
Size

60KB
MD5

bb562ccc2f121ff7af7d460e6c5f9d11
SHA1

8cbd7ea890e0c5d56a7f8f97fd1d3588cb4e59e0
SHA256

0734c54625928ac3170a826937b366a98cacb88d69dd342a31c40d5825b4981a
SHA512

53c38f75b81f9ec3558af196f716d1ac153fc55be81ee725209736bbca678cd5f03c1147aa286030ebd7c66feabd2751a3f2c68f8cc205b763aaeef1f05321ce
SSDEEP

1536:v352ZdY+Abwa2PTq5D1jJV4JhzUTJgRNjczAGNcgwcBt2cT:0/YW/PT81ViDwTmPAKgBt2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb562ccc2f121ff7af7d460e6c5f9d11_JaffaCakes118

Files

bb562ccc2f121ff7af7d460e6c5f9d11_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fd8dccf6548da44ea37b755d201bc6b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\kCHuiwrwxmbm\msfdJhnbc\uqjnmbyr\gwwblwcAspxtsq.pdb

Imports

user32

GetFocus
CharToOemBuffA
GetDCEx
CreateWindowExW
MessageBoxExW
IntersectRect
MessageBoxW
GetClassLongA
CallWindowProcA
HideCaret
ChildWindowFromPointEx
SystemParametersInfoW
GetClipCursor
RemoveMenu
ShowOwnedPopups
GetMenu
IsCharUpperA
EnumThreadWindows
GetNextDlgTabItem
InternalGetWindowText
ToUnicodeEx
GetClassNameW
RegisterClassExW
GetDlgItemTextW
WaitForInputIdle
ModifyMenuW
DispatchMessageA
SetWindowLongW
ScrollWindowEx
IsWindowVisible
GetParent
GetMenuStringW
DrawTextA
InvalidateRgn
GetSysColor
CharNextExA
CheckDlgButton
SetActiveWindow
LookupIconIdFromDirectory
ValidateRect
GetTopWindow
CreateDialogParamA
GetMessagePos
GetScrollInfo
DeferWindowPos
DragObject
TabbedTextOutW
OpenInputDesktop
GetLastActivePopup
EndDialog
GetShellWindow
SetWindowLongA
FindWindowW
GetDlgItem
GetUpdateRgn
ExitWindowsEx
CopyImage
PostThreadMessageA
GetIconInfo
LoadAcceleratorsW
IsWindow
SetLastErrorEx
LockWindowUpdate
ShowCaret
SendDlgItemMessageA
mouse_event
DestroyWindow
LoadBitmapA
MapVirtualKeyA
OpenIcon
IsMenu
CharPrevA
GetClassInfoExW
GetAsyncKeyState
SetRect
GetMenuCheckMarkDimensions
LoadImageW
RegisterClassW
DefWindowProcW
LoadStringA
ShowScrollBar
SendInput
CloseDesktop
GetDC
BringWindowToTop
ClipCursor
ChildWindowFromPoint
BeginPaint
GetUserObjectInformationA
GetMessageExtraInfo
VkKeyScanW
GetDlgCtrlID
GetKeyboardLayoutList
CharLowerA
CreateIconIndirect
SetSysColors
ScrollWindow
DeleteMenu
SetDlgItemTextW
InSendMessageEx
DrawTextW
RegisterHotKey
LoadAcceleratorsA
DrawFrameControl
TrackPopupMenu
SetUserObjectInformationW
DefDlgProcW
InsertMenuA
TranslateAcceleratorA
SetFocus
SetWindowRgn
FindWindowExW
keybd_event
CheckMenuRadioItem
FrameRect
CopyRect
AppendMenuW
IsCharLowerA
ArrangeIconicWindows
SetRectEmpty
CheckRadioButton
WaitMessage

shlwapi

PathIsUNCA

kernel32

SetFileApisToOEM
lstrcatW
SetHandleCount
CreateMutexA
GetFileAttributesW
GetFileAttributesExA
lstrlenW
TransactNamedPipe
EscapeCommFunction
GetOverlappedResult
SetErrorMode
GetTickCount
GetBinaryTypeW
CreateNamedPipeA
DuplicateHandle
FlushFileBuffers
GetThreadLocale
ReadFile
GetCommState
CreateDirectoryA
GetTempFileNameW
FlushViewOfFile
lstrcmpiW
GlobalGetAtomNameA
GetModuleHandleW
GetModuleFileNameA
TryEnterCriticalSection
lstrcpyA
SetLocalTime
MapViewOfFile
FindFirstFileA
OpenEventW
SetTimerQueueTimer
GlobalDeleteAtom
SetFileAttributesA
GetFullPathNameW
ReleaseMutex
GetThreadTimes
MoveFileW
GetCommandLineW
UnmapViewOfFile
SetThreadLocale
MoveFileA
SetThreadPriority
GlobalReAlloc
SetWaitableTimer
CreateMailslotW
TlsSetValue
SetThreadExecutionState
GetCommTimeouts
DisconnectNamedPipe
SetLastError
TerminateThread
GetAtomNameW
GetTempPathA

msvcrt

isalpha
qsort
_controlfp
rand
wcsstr
toupper
wcscat
srand
clearerr
realloc
wcscspn
memset
malloc
strerror
isalnum
strncmp
mbstowcs
fprintf
__set_app_type
__p__fmode
localtime
strcspn
strstr
wcstombs
__p__commode
fflush
_amsg_exit
strncpy
puts
_initterm
strcpy
_ismbblead
fseek
_XcptFilter
wcstok
strpbrk
free
_exit
_cexit
__setusermatherr
fputc
iswxdigit
strcoll
iswspace
strchr
__getmainargs
tolower
iswdigit
wcschr
strspn

Exports

Exports

?ForwardControlItem@@YGK_KK:O

Sections

.itext
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ips1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips2
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.read
Size: 1024B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ips3
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips4
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd8dccf6548da44ea37b755d201bc6b1

Headers

File Characteristics

PDB Paths

Imports

user32

shlwapi

kernel32

msvcrt

Exports

Exports

Sections

.itext Size: 21KB - Virtual size: 21KB

.ips1 Size: 6KB - Virtual size: 5KB

.ips2 Size: 512B - Virtual size: 88B

.read Size: 1024B - Virtual size: 40KB

.ips3 Size: 512B - Virtual size: 192B

.data Size: 3KB - Virtual size: 2KB

.ips4 Size: 7KB - Virtual size: 7KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 2KB - Virtual size: 1KB

.itext
Size: 21KB - Virtual size: 21KB

.ips1
Size: 6KB - Virtual size: 5KB

.ips2
Size: 512B - Virtual size: 88B

.read
Size: 1024B - Virtual size: 40KB

.ips3
Size: 512B - Virtual size: 192B

.data
Size: 3KB - Virtual size: 2KB

.ips4
Size: 7KB - Virtual size: 7KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 2KB - Virtual size: 1KB