c27d901b49deb75c5ca80648f20e27c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c27d901b49deb75c5ca80648f20e27c4_JaffaCakes118
Size

147KB
MD5

c27d901b49deb75c5ca80648f20e27c4
SHA1

873081ea7b53abc73e021155caf9dc7f94fdaca7
SHA256

e379b86741ff3e010dd4bebcd3cf0f05c254df6859761591c91221508dff4247
SHA512

b5c79a53c98af66e39a7a3371f1916c847105fe11d2b39070010c0182339fe013ce7f90b320f924539493ca985516d9732cc89003642405d887b1d3aa34b9383
SSDEEP

3072:qLR2qJvqWXRz13CEB09G81wuYGUo1V/mYa/2YnQ3gSR9WBNjdsd6s:wsCf7O9GOam1V/y/SWBNjdsd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c27d901b49deb75c5ca80648f20e27c4_JaffaCakes118

Files

c27d901b49deb75c5ca80648f20e27c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8a942d9bdfc0225a796ca87c89053d65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

I:\fxhatiqwa\HvpbvxHTlmiCg\ttYDBooOMtt.pdb

Imports

user32

GetWindowRect
CopyRect
GetClassInfoExW
IsCharLowerA
SendMessageW
GetWindow
GetScrollRange
GetClipCursor
LoadCursorA
KillTimer
GetMonitorInfoW
GetMessageA
LookupIconIdFromDirectory
GetMenu
CallWindowProcA
ScrollWindow
GetMenuStringA
wvsprintfA
CharNextA
OpenDesktopW
TrackPopupMenu
SetTimer
IsChild
ShowWindowAsync
GetMenuItemID
SetMenu
GetMenuCheckMarkDimensions
InvalidateRgn
CreateDialogIndirectParamW
CreateIconIndirect
SetWindowPlacement
SetDlgItemInt
AdjustWindowRectEx
GetUpdateRect
GetClassInfoA
InvalidateRect
LoadBitmapW
SetDlgItemTextA
GetClassLongW
GetAltTabInfoW
DestroyIcon
CharNextExA
ClientToScreen
DeleteMenu
GetDC
TranslateAcceleratorW
ValidateRect
GetMessagePos
GetTopWindow
GetWindowLongA
SendMessageTimeoutA
ShowOwnedPopups
GetWindowLongW
EnableMenuItem
LoadImageA
ShowCaret
DestroyWindow
LoadStringW
InsertMenuW
GetDlgCtrlID
DrawFrameControl
WaitForInputIdle
GetMenuItemRect
DestroyCaret
GetMenuItemInfoW
DefFrameProcA
MessageBoxA
DrawFocusRect
CharLowerW
CreateDialogParamW
RegisterClassExW
CharNextW
PostThreadMessageA
ShowWindow
OpenIcon
SetRect
EnumWindows
LoadCursorW
SetMenuItemBitmaps
FindWindowA
RedrawWindow
MapWindowPoints
GetDoubleClickTime
DefDlgProcW
SetRectEmpty
DialogBoxParamA
SendDlgItemMessageW
CharUpperBuffA
InternalGetWindowText
GetClassInfoW
keybd_event
PostMessageW
IsWindowUnicode
DefFrameProcW
GetDlgItem
GetSystemMetrics
RegisterClassW
ToUnicodeEx
DialogBoxIndirectParamW
OemToCharBuffA
DrawStateA
BeginPaint
CreateCaret
wvsprintfW
PostThreadMessageW
MapVirtualKeyA
SetCursor
GetClassNameW
SystemParametersInfoW
MonitorFromRect
IsWindow
IsCharAlphaNumericW
CopyAcceleratorTableW
SetWindowPos
GetSubMenu
SetDlgItemTextW
CreatePopupMenu
ChildWindowFromPointEx
IsRectEmpty
GetKeyboardLayoutList
CreateCursor
InSendMessage

comdlg32

ReplaceTextW
ChooseColorW
CommDlgExtendedError
PrintDlgExW
ChooseFontW

kernel32

FindFirstFileW
SetFileTime
CallNamedPipeW
IsValidLocale
VirtualProtect
SetCurrentDirectoryA
CancelWaitableTimer
LoadLibraryW
CreateDirectoryW
SetupComm
EnumResourceNamesA
ReleaseSemaphore
FindNextFileA
AddAtomA
CreateRemoteThread
GetAtomNameA
GetStartupInfoA
CancelIo
GetCommConfig
HeapUnlock
LocalSize
VirtualQuery
GetCurrentThread
GetModuleHandleA
ClearCommError
GetACP
DeleteFileW
GetSystemWindowsDirectoryW
GetSystemDefaultUILanguage
FindResourceExW
GetCurrentThreadId
CreateNamedPipeA
GetHandleInformation
TlsFree
SetPriorityClass
GetTimeZoneInformation
DeviceIoControl
CompareFileTime
IsBadStringPtrW
GetModuleFileNameW
CreateEventA
HeapFree
SetEndOfFile
GlobalGetAtomNameW
VerifyVersionInfoW
GlobalAddAtomA
GetTempPathW
LCMapStringA
SetErrorMode
GetModuleHandleW
GetShortPathNameA
LocalFree
SetCommMask
FindCloseChangeNotification
GetThreadTimes
SuspendThread

gdi32

SetBkColor
SetViewportExtEx
SetAbortProc
CreateDiscardableBitmap
Rectangle
GetObjectA
GetClipBox
GetROP2
RemoveFontResourceW
TranslateCharsetInfo
SetPixel
EndPath
GetMapMode
GetPaletteEntries
Ellipse
PathToRegion
GetTextExtentPointW
StretchDIBits
ScaleWindowExtEx
GetObjectW
SetBitmapDimensionEx
ExcludeClipRect
SetPaletteEntries
SetWindowOrgEx
MoveToEx
GetTextMetricsA
CreateHalftonePalette
RealizePalette
CreateRectRgn
GetTextColor
DPtoLP
CreateCompatibleDC
StartPage
OffsetViewportOrgEx
SetWindowExtEx
LineTo
PtInRegion
TextOutA
LPtoDP
GetTextMetricsW
CreateRectRgnIndirect
StartDocW
GetRgnBox
ScaleViewportExtEx
RectVisible
GetWindowOrgEx
GetTextAlign
StretchBlt
RectInRegion
CreateICW
CreateRoundRectRgn

msvcrt

_controlfp
__set_app_type
clearerr
wcstoul
fgets
wcsncmp
__p__fmode
remove
__p__commode
isupper
fputc
atoi
wcsncpy
gets
puts
_amsg_exit
time
strcoll
towlower
iswxdigit
_initterm
sprintf
strtok
_acmdln
system
exit
mbtowc
setvbuf
bsearch
ungetc
atol
wcscspn
strrchr
ftell
strtoul
_ismbblead
_XcptFilter
_exit
_cexit
fgetc
strncmp
wcstombs
__setusermatherr
strncpy
clock
fseek
__getmainargs
wcslen

Exports

Exports

?SendHeightNew@@YGXPAKJK]A
?BitCounterArrayIdeDunAs@@YGKGE@Z
?CallScreen@@YGPAFPAI]A

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a942d9bdfc0225a796ca87c89053d65

Headers

File Characteristics

PDB Paths

Imports

user32

comdlg32

kernel32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 132KB

.rsrc Size: 119KB - Virtual size: 118KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 132KB

.rsrc
Size: 119KB - Virtual size: 118KB

.reloc
Size: 2KB - Virtual size: 1KB