c1c435de5da008acb6755cf9071f6e01_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c1c435de5da008acb6755cf9071f6e01_JaffaCakes118
Size

171KB
MD5

c1c435de5da008acb6755cf9071f6e01
SHA1

e01a73aac22970dcc7d81d47b320d27d08386015
SHA256

98ac9f840a81efc5b99bae13dd60e0f7fdb425e7c6753ade0a8f2ac71e99a8b3
SHA512

c58b7f8c9451ec9dda63f7d879791551880e4fe58a028fb07ab5d4fed2e3b3d530622c0aed8fd30a01c1081a00199411e368234dc9c290038a3e8d9e64e9560a
SSDEEP

3072:mp2f8eAlq7llEJOr1rvsbDtTduVOPinV8VxXSRXDXZhRfB4QQRMLGeaJ3j:mcf5AlqpeltTEVOaVO0Tff4QQKRaJ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1c435de5da008acb6755cf9071f6e01_JaffaCakes118

Files

c1c435de5da008acb6755cf9071f6e01_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fc239a6039044bbd02d9d510b7c0c66e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\oQxUvrcVuaV\omHGhxQDlvq\jpxallHg\jJrbTmRbGmPcFw\pjIEfUlEMuwvI.pdb

Imports

msvcrt

_controlfp
system
isprint
atol
strcspn
mbstowcs
strcoll
printf
towlower
time
fgetc
__set_app_type
__p__fmode
isalnum
strtok
wcscat
mbtowc
__p__commode
sscanf
_amsg_exit
_initterm
putchar
localtime
fclose
ungetc
wcsncpy
rand
_ismbblead
swscanf
iswxdigit
wcsncmp
isupper
_XcptFilter
_exit
vswprintf
_cexit
bsearch
strcpy
__setusermatherr
__getmainargs
clearerr
wcscpy
strtoul
perror

kernel32

SetUnhandledExceptionFilter
GetFileAttributesExA
FindFirstChangeNotificationW
CallNamedPipeW
IsValidLocale
FindNextChangeNotification
SetThreadExecutionState
GetPriorityClass
FindNextFileW
WaitForMultipleObjectsEx
SetNamedPipeHandleState
GetLastError
GlobalFree
GetModuleHandleA
ReadFile
GetCPInfo
SetMailslotInfo
GetLocaleInfoA
LoadLibraryExA
GetTimeFormatA
GetLocaleInfoW
lstrcatW
GetFullPathNameA
OpenFileMappingW
IsBadStringPtrW
CreateEventA
UnlockFile
EnterCriticalSection
TlsGetValue
HeapCreate
Sleep
FoldStringW
VerSetConditionMask
WinExec
CreateThread
CreateFileMappingW
CompareStringW
DefineDosDeviceW
CreateSemaphoreA
SearchPathW
CancelIo
LeaveCriticalSection
GetStartupInfoW
IsValidLanguageGroup
SetCommTimeouts
SystemTimeToFileTime
MoveFileExA
lstrcmpiA
GetStringTypeExW
CreateMutexA

gdi32

GetROP2
DPtoLP
SetDIBits
EnumFontFamiliesW
CreateICW
GetSystemPaletteEntries
CreateRectRgn
GetMapMode
CreateHalftonePalette
SetPaletteEntries
CreateDiscardableBitmap
ExtTextOutW
TextOutW
GetFontData
GetDIBColorTable
Polyline
GetTextFaceW
GetTextAlign
CreateBrushIndirect
GetBkMode
GetLayout
CreateSolidBrush
EnumFontFamiliesExW
CreateBitmapIndirect
CreateBitmap
CreatePen
CreateDIBSection
CombineRgn
GetNearestPaletteIndex
Ellipse
GetTextMetricsA
RealizePalette
UnrealizeObject
SetTextColor
EndDoc
GetSystemPaletteUse
SetDIBitsToDevice
SetDIBColorTable
SetAbortProc
ResizePalette
WidenPath
ExcludeClipRect
CreateEllipticRgnIndirect
RemoveFontResourceW
CreateDCW
CreatePolygonRgn
GetViewportOrgEx

user32

DestroyCaret
DrawFocusRect
LoadImageW
WaitMessage
DestroyMenu
DrawAnimatedRects
DefDlgProcW
ActivateKeyboardLayout
SetTimer
GetWindowTextA
SendInput
LockWindowUpdate
WaitForInputIdle
SetMenu
GetMenu
RegisterWindowMessageW
GetScrollPos
MessageBoxExA
IsChild
GetUpdateRgn
LoadMenuA
AppendMenuW
CreateIconIndirect
GetWindowLongA
GetWindowTextLengthW
CheckRadioButton
InflateRect
TrackPopupMenu
ReleaseDC
SendMessageW
MoveWindow
DrawFrameControl
LoadCursorA
SetUserObjectInformationW
CreatePopupMenu
SetClassLongW
CreateWindowExW
IsIconic
InsertMenuItemW
OffsetRect
LoadCursorW
AdjustWindowRectEx
GetWindowTextW
GetDlgCtrlID
WindowFromPoint
InsertMenuA
SystemParametersInfoW
GetMenuItemCount
VkKeyScanW
RegisterClassExA
EndDialog
CloseDesktop
IsDialogMessageW
OpenDesktopW
ScrollWindowEx
IsWindow
CharToOemW
SetCaretPos
GetKeyboardType
PeekMessageW
GetWindow
CreateDialogParamW
SetWindowTextW
DestroyAcceleratorTable
GetClassInfoExA
GetWindowLongW
EqualRect
SetScrollPos
IsWindowUnicode
KillTimer
InSendMessageEx
CreateIconFromResource
CopyAcceleratorTableW
DefWindowProcA
keybd_event
EnumWindows
GetDoubleClickTime
DestroyWindow
CharPrevA
SendMessageA
DefFrameProcA
RegisterHotKey
SetCursor
GetWindowDC
SetDlgItemInt
CascadeWindows
GetMenuItemID
DialogBoxParamA
SwitchToThisWindow
CheckMenuRadioItem
MapDialogRect
PtInRect
IsDlgButtonChecked
wsprintfA
GetSystemMenu
RegisterClassExW
CreateMenu
GetClassLongA
GetMenuItemInfoW
LoadMenuW
GetTopWindow
GetPropW
SetCursorPos
MapVirtualKeyExW
ShowCaret
RegisterClassW
LoadIconA
GetCaretPos
ShowCursor
GetSubMenu
LookupIconIdFromDirectory

shell32

ord524

Exports

Exports

?HidePointerOriginal@@YGFKPAIPAD<V

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc239a6039044bbd02d9d510b7c0c66e

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

gdi32

user32

shell32

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 111KB

.data Size: 56KB - Virtual size: 76KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 111KB - Virtual size: 111KB

.data
Size: 56KB - Virtual size: 76KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB