c7db3e47ca9af58cd6c776a9a602fdf6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c7db3e47ca9af58cd6c776a9a602fdf6_JaffaCakes118
Size

147KB
MD5

c7db3e47ca9af58cd6c776a9a602fdf6
SHA1

4987bad77213d43eb930c9bd60b5626f81181767
SHA256

d205920397c346b57e35886f567afe3812ce1c7898379551727e9d5c2f58b562
SHA512

ba945dd42653ed433acf7952c2fda639657da7069dfaf33f49383c7a9332ce08ff907b98fb3afc61af4ef4b2dfd8037b0a10fb9a75fc5e3b18218a036b3a524a
SSDEEP

3072:8q4xVZT/inkoi+GLelKvRDNdZ0y4yehlIik6B7:+xVZrd+jwn74yeh7FB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7db3e47ca9af58cd6c776a9a602fdf6_JaffaCakes118

Files

c7db3e47ca9af58cd6c776a9a602fdf6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

88e69fbe1cee84c63285d70673560bf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\kngfPTweAW\Xghnoym\RBLoKCh\fmnocpeI\izTPhmbfw.pdb

Imports

user32

GetShellWindow
GetDlgCtrlID
SendMessageTimeoutA
CreateDialogIndirectParamW
GetClassInfoExW
MonitorFromPoint
DeleteMenu
InflateRect
GetUserObjectInformationW
GetScrollInfo
CreateIconIndirect
GetClassInfoExA
LoadCursorW
LoadBitmapW
DrawEdge
OpenIcon
GetMessageA
CreateWindowExW
GetKeyboardLayout
CheckRadioButton
AllowSetForegroundWindow
GetKeyboardLayoutList
CreateAcceleratorTableW
GetWindowRect
OemToCharBuffA
SetScrollInfo
TrackPopupMenu
CharUpperA
SetSysColors
MessageBoxExW
GetMessageW
MessageBoxW
DispatchMessageW
IsCharUpperA
ScrollWindow
GetMenuItemInfoW
IsIconic
DefFrameProcW
CharPrevA
GetClipCursor
OemToCharA
SetDlgItemInt
ShowCaret
SetPropW
GetClassLongA
DialogBoxParamW
GetMessageTime
GetParent
GetWindow
GetMonitorInfoW
EndDialog
CharToOemA
SetTimer
ReplyMessage
SystemParametersInfoW
DefWindowProcW
SetFocus
MoveWindow
CopyImage
SetActiveWindow
LoadIconW
UpdateWindow
GetPropW
TranslateAcceleratorW
LoadMenuA
LookupIconIdFromDirectory
IsRectEmpty
LoadIconA
EnumThreadWindows
CopyRect
ChildWindowFromPoint
CharLowerBuffW
SendDlgItemMessageW
SetWindowLongW
CreateDialogParamW
MapDialogRect
VkKeyScanW
MonitorFromRect
MapWindowPoints
LoadStringA
ClipCursor
GrayStringW
PostQuitMessage
CopyAcceleratorTableW
AppendMenuA
DestroyAcceleratorTable
EnableScrollBar
SetRect
wvsprintfA
SetRectEmpty
RegisterClassW
GetMenuItemRect
CharToOemBuffA
SetLastErrorEx
CharLowerA
SetMenu
DestroyCursor
UnionRect
GetDlgItemTextA
InsertMenuW
ClientToScreen
FrameRect
GetLastActivePopup
GetMessageExtraInfo
ScreenToClient
ScrollWindowEx
FindWindowExW
AppendMenuW
CharUpperW
GetDC
GetDialogBaseUnits
GetWindowPlacement
TranslateAcceleratorA
MessageBoxExA
IsCharAlphaNumericW
DrawMenuBar
TabbedTextOutW
GetWindowTextLengthW
DialogBoxParamA
SetMenuItemBitmaps
DrawFrameControl

msvcrt

fgetc
wcspbrk
perror
_controlfp
isprint
puts
memset
gmtime
mbtowc
atol
wcscoll
__set_app_type
wcstod
remove
iswdigit
vswprintf
__p__fmode
__p__commode
_amsg_exit
setvbuf
malloc
wcsncmp
wcstombs
_initterm
isalpha
rand
_ismbblead
_XcptFilter
fputc
_exit
fgets
clearerr
strpbrk
isxdigit
clock
putc
towlower
islower
wcsstr
_cexit
iswprint
isspace
localtime
strrchr
__setusermatherr
__getmainargs
swscanf
strerror

kernel32

SetFileApisToOEM
GetSystemWindowsDirectoryW
GlobalUnlock
GlobalHandle
CreateDirectoryW
lstrlenW
FindResourceA
IsBadWritePtr
GetVersion
GetStartupInfoA
lstrcpyW
FormatMessageW
SetEndOfFile
OpenEventA
MoveFileW
DisconnectNamedPipe
lstrcatA
GetTempFileNameA
LoadLibraryA
FindNextFileW
GetSystemDefaultUILanguage
lstrcpyA
HeapWalk
GetComputerNameW
SetThreadLocale
VirtualQuery
CancelIo
GetFullPathNameW
LocalFree
GetLocalTime
CreateNamedPipeA
FindResourceExA
SearchPathA
GetModuleFileNameA
CopyFileW
LockResource
HeapCreate
FindResourceExW
GetNumberFormatA
FileTimeToLocalFileTime
AreFileApisANSI
SetCommBreak
QueryDosDeviceW
SetPriorityClass
CreateEventW
GetCommProperties
ConnectNamedPipe
SetFileAttributesA
ConvertDefaultLocale
GetCompressedFileSizeW
HeapReAlloc
GlobalGetAtomNameA
GetFullPathNameA
GetTempPathW
TlsGetValue
CreateFileMappingW

shlwapi

PathIsUNCW

Exports

Exports

?OwnerInitDescriptor@@YGK_KK:O

Sections

.itext
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ips1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips2
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ntrs
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ips3
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mode
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88e69fbe1cee84c63285d70673560bf9

Headers

File Characteristics

PDB Paths

Imports

user32

msvcrt

kernel32

shlwapi

Exports

Exports

Sections

.itext Size: 21KB - Virtual size: 21KB

.ips1 Size: 6KB - Virtual size: 5KB

.ips2 Size: 512B - Virtual size: 89B

.ntrs Size: 512B - Virtual size: 267B

.ips3 Size: 1024B - Virtual size: 704B

.data Size: 3KB - Virtual size: 2KB

.mode Size: - Virtual size: 124KB

.rsrc Size: 111KB - Virtual size: 111KB

.reloc Size: 2KB - Virtual size: 1KB

.itext
Size: 21KB - Virtual size: 21KB

.ips1
Size: 6KB - Virtual size: 5KB

.ips2
Size: 512B - Virtual size: 89B

.ntrs
Size: 512B - Virtual size: 267B

.ips3
Size: 1024B - Virtual size: 704B

.data
Size: 3KB - Virtual size: 2KB

.mode
Size: - Virtual size: 124KB

.rsrc
Size: 111KB - Virtual size: 111KB

.reloc
Size: 2KB - Virtual size: 1KB