c0672df8f9ab032de31f4d28b8fbafbe_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c0672df8f9ab032de31f4d28b8fbafbe_JaffaCakes118
Size

142KB
MD5

c0672df8f9ab032de31f4d28b8fbafbe
SHA1

a617a180d6d33077427e866690acb058f6aef05e
SHA256

a190711393cdb877fd652e57ce236b0c3989f2bcf9e7b4cb2336ba6b44e7a5fe
SHA512

553b89ebf9126a6cf90b6b318b6ead2bbdb6f6b9c4cfab58408c021e1dbbeb0897dc900d1913fff06ee3e93e9bf5740b3568774729139da11bd825a2235ac477
SSDEEP

3072:PMHLkK+FPNd+xteUUxuRVAQh8fZX8r69g9umAfZ3ObltBs:PE+FP4eORCwutNO9umAfZe5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0672df8f9ab032de31f4d28b8fbafbe_JaffaCakes118

Files

c0672df8f9ab032de31f4d28b8fbafbe_JaffaCakes118
.dll windows:5 windows x86 arch:x86

96e61a95331499e3a447219cf9663233

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\qVCmGERvqtuX\OpoayrwywlEuIw\thTpYdBfa\QveqmznrwU.pdb

Imports

user32

FrameRect
IsZoomed
LoadIconW
RedrawWindow
DestroyIcon
GetWindowPlacement
FindWindowExW
SetSysColors
LoadIconA
GetMenuItemCount
IsRectEmpty
UpdateWindow
LoadAcceleratorsW
ShowOwnedPopups
GetPropW
MapVirtualKeyExW
IntersectRect
GetKeyboardLayoutNameW
GetWindowTextA
CharToOemW
InternalGetWindowText
GetMonitorInfoW
SystemParametersInfoA
DispatchMessageW
GetWindowTextLengthW
InSendMessage
PostThreadMessageA
AdjustWindowRect
SendDlgItemMessageA
GetMenuItemInfoW
SetMenuDefaultItem
ActivateKeyboardLayout
GetMenuItemRect
LookupIconIdFromDirectory
MapVirtualKeyA
MessageBoxExA
CheckMenuRadioItem
FindWindowW
wvsprintfW
GetScrollRange
LoadBitmapA
CharPrevW
GetKeyNameTextW
SetActiveWindow
IsCharAlphaA
TabbedTextOutW
SetScrollRange
DefFrameProcA
SetScrollInfo
GetClassInfoW
IsDialogMessageW
AppendMenuA
CharToOemBuffA
GetClassLongA
GetForegroundWindow
VkKeyScanA
CheckRadioButton
ReplyMessage
GetWindowDC
RegisterClassExW
CharUpperBuffW
IsCharAlphaW
ChangeMenuW
ValidateRect
SetDlgItemInt
SendMessageA
MapWindowPoints
SetParent
IsWindowEnabled
CharLowerBuffW
SendMessageW
AdjustWindowRectEx
CloseDesktop
SetRect
GetScrollInfo
SetMenuItemBitmaps
GetUserObjectInformationA
RegisterClassExA
CallWindowProcW
GetMenu
MonitorFromPoint
LoadAcceleratorsA
GetMenuState
GetDCEx
ExitWindowsEx
GetMessageTime
CreateIconFromResource
LoadCursorA
DestroyCursor
SetForegroundWindow
MessageBoxExW
IsCharAlphaNumericW
wvsprintfA
OffsetRect
SetScrollPos
wsprintfA
IsWindowVisible
GetWindowLongW
FindWindowExA
ShowScrollBar
TranslateMessage
GetDialogBaseUnits
CharNextW
IsDlgButtonChecked
UnionRect
GetMenuStringW
GetClassInfoExA
PeekMessageA
DrawEdge
DestroyCaret
DrawFrameControl
GetAsyncKeyState
GetDlgItemTextW
AttachThreadInput
CallWindowProcA
GetDlgItemTextA
GetClassNameW
SetUserObjectInformationW
GetDlgCtrlID
SetDlgItemTextA

comctl32

CreatePropertySheetPageA
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_Write
ImageList_Create
ImageList_ReplaceIcon

msvcrt

wcscpy
free
strpbrk
swprintf
wcsrchr
_controlfp
ftell
__set_app_type
remove
iswalpha
wcstoul
strcpy
strspn
isspace
clock
wcschr
__p__fmode
strrchr
iswxdigit
__p__commode
fprintf
_amsg_exit
wcscoll
iswspace
swscanf
_initterm
fclose
gmtime
putc
iswdigit
_ismbblead
strcspn
strchr
vsprintf
_XcptFilter
fflush
isupper
fputs
_exit
putchar
malloc
wcstod
strstr
_cexit
perror
__setusermatherr
__getmainargs

kernel32

LoadLibraryExW
lstrlenA
GetFileType
IsValidLanguageGroup
LocalReAlloc
GlobalUnlock
SetPriorityClass
GetVersion
GetCommState
GlobalGetAtomNameW
FindFirstFileW
SetFileTime
SetMailslotInfo
FindResourceExA
lstrcpynW
GetTempPathA
VerifyVersionInfoW
GetPriorityClass
GetModuleFileNameA
GetLastError
WaitCommEvent
CreateRemoteThread
CompareStringA
Sleep
SetFileApisToOEM
GetModuleHandleA
FileTimeToSystemTime
lstrcmpiA
HeapCreate
RemoveDirectoryA
WaitForMultipleObjectsEx
GlobalLock
lstrcmpA
GetComputerNameExW
LoadResource
CopyFileW
LeaveCriticalSection
GetTickCount
GetCommandLineA
GetWindowsDirectoryW
GetCurrentThreadId
GetLocaleInfoA
FlushViewOfFile
EnumSystemLocalesA
TlsSetValue
GetComputerNameA
GlobalFree
OpenFileMappingW
GetBinaryTypeA
SetFilePointer
CreateFileW
GetFileAttributesExW
lstrlenW
ReadFile
AddAtomA
lstrcatA
SetThreadLocale

Exports

Exports

H99:O
?RegenerateMainValues@@YGKPBDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.e_tab
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.redit
Size: 1KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_tab
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.site
Size: 512B - Virtual size: 419B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96e61a95331499e3a447219cf9663233

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.e_tab Size: 512B - Virtual size: 141B

.redit Size: 1KB - Virtual size: 167KB

.data Size: 2KB - Virtual size: 1KB

.i_tab Size: 6KB - Virtual size: 5KB

.site Size: 512B - Virtual size: 419B

.wdata Size: 512B - Virtual size: 192B

.rsrc Size: 108KB - Virtual size: 107KB

.text
Size: 22KB - Virtual size: 22KB

.e_tab
Size: 512B - Virtual size: 141B

.redit
Size: 1KB - Virtual size: 167KB

.data
Size: 2KB - Virtual size: 1KB

.i_tab
Size: 6KB - Virtual size: 5KB

.site
Size: 512B - Virtual size: 419B

.wdata
Size: 512B - Virtual size: 192B

.rsrc
Size: 108KB - Virtual size: 107KB