c8c4d78cfb276dd7f4d0bbc84db19770_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c8c4d78cfb276dd7f4d0bbc84db19770_JaffaCakes118
Size

219KB
MD5

c8c4d78cfb276dd7f4d0bbc84db19770
SHA1

09c388d507aff24aa6e2f1b6b13c0fedef5c46c6
SHA256

772b99fa913bb2c6652c43560ebd1cd2004212db7c03dc1b7f1adfdcc123e2eb
SHA512

6df9c4b02b20653827b52d517a017cdb8fad62dda9eea58cd8807014b6beeb425616cd03a7d2dcaca1aa49d77c38c935744da15b6837676bfc8b91d994143480
SSDEEP

6144:wQ7YmLV4NtsteowptthyW14s/X966uHunnNEsfbTQEPty:wEhgtsbyJy646X966nNEwPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8c4d78cfb276dd7f4d0bbc84db19770_JaffaCakes118

Files

c8c4d78cfb276dd7f4d0bbc84db19770_JaffaCakes118
.exe windows:5 windows x86 arch:x86

84e5f18105afc462363e8514c092cc12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\boXbljshlZ\cfWBEiJqnkdgI\lqhcakwM\gdxnvNsycvnkx.pdb

Imports

user32

GetParent
RegisterClassExW
GetWindowLongW
CheckDlgButton
BeginDeferWindowPos
GetScrollInfo
InsertMenuItemW
GetWindowDC
CharToOemA
DestroyWindow
GetSysColorBrush
IsMenu
MapVirtualKeyExW
EnumChildWindows
GetUpdateRgn
GrayStringW
IsCharAlphaNumericW
TrackPopupMenu
GetKeyState
IsWindowEnabled
TranslateMessage
WaitMessage
WaitForInputIdle
PostQuitMessage
mouse_event
GetMenuStringA
SetDlgItemTextW
GetClipCursor
GetWindow
RegisterClassExA
EndPaint
SetPropW
SetFocus
SetWindowLongW
CopyRect
SendMessageTimeoutW
ScrollWindowEx
DefDlgProcA
ScreenToClient
GetDialogBaseUnits
SetScrollInfo
SetWindowLongA
ShowWindowAsync
DispatchMessageW
InsertMenuA
DialogBoxParamA
CheckRadioButton
ShowScrollBar
GetMenuState
EnumWindows
PeekMessageA
EnableScrollBar
GetDlgItemInt
IsCharLowerA
AttachThreadInput
GetForegroundWindow
GetDCEx
CreateWindowExW
DefFrameProcW
SystemParametersInfoW
CharNextA
IntersectRect
RegisterWindowMessageW
CreateIconIndirect
DrawEdge
GetWindowTextA
RegisterClassA
WindowFromPoint
IsDlgButtonChecked
FindWindowExW
UnloadKeyboardLayout
GetMenuItemCount
DestroyAcceleratorTable
CloseDesktop
CharUpperA
RemoveMenu
MessageBoxA
CharUpperW
IsWindowUnicode
ChildWindowFromPoint
EndDialog
AdjustWindowRectEx
LoadBitmapW
DrawTextA
MapVirtualKeyW
PostMessageW
MapVirtualKeyA
EndTask
ToUnicodeEx
GetCaretPos
wvsprintfW
GetWindowRect
OpenInputDesktop
GetMessageW
ScrollWindow
LoadImageA
TranslateAcceleratorW
MoveWindow
GetLastActivePopup
ValidateRect
GetKeyboardType
GetClientRect
SetWindowTextA
DefDlgProcW
CopyAcceleratorTableW
BeginPaint
GetKeyboardLayoutNameW
EnableWindow
CopyImage

comctl32

CreateStatusWindowW
ImageList_AddMasked
PropertySheetW
ImageList_Read
ImageList_ReplaceIcon
CreatePropertySheetPageA

kernel32

ClearCommBreak
CreateRemoteThread
FindCloseChangeNotification
CreateDirectoryW
WinExec
FoldStringW
FormatMessageA
GetCommModemStatus
GetTickCount
AddAtomA
OpenSemaphoreW
ResetEvent
GlobalFree
FindResourceExW
GetTempPathW
SleepEx
IsDBCSLeadByteEx
HeapFree
GetShortPathNameA
LoadLibraryExA
LockResource
DisconnectNamedPipe
LCMapStringA
UnlockFile
GlobalHandle
GlobalAddAtomW
AddAtomW
GetTimeZoneInformation
GlobalDeleteAtom
SetThreadContext
MoveFileW
FindResourceW
LoadResource
SetNamedPipeHandleState
LocalUnlock
WaitForMultipleObjects
HeapAlloc
GlobalGetAtomNameW
ExitThread
SetSystemTime
LocalLock
FindFirstFileA
LocalFree
FreeResource
GetProcessHeap
CreateFileW
LoadLibraryW
GetFileTime
GetNumberFormatW
CallNamedPipeW
FindResourceA
RegisterWaitForSingleObject
ClearCommError
EnumResourceTypesA
QueryDosDeviceW
GetTimeFormatA

msvcrt

_controlfp
gmtime
free
fread
remove
sprintf
wcstombs
system
strcoll
__set_app_type
setlocale
wcstod
__p__fmode
__p__commode
_amsg_exit
atoi
strncpy
qsort
atol
_initterm
_ismbblead
strstr
rand
iswxdigit
swscanf
clock
_XcptFilter
fprintf
fwrite
_exit
_cexit
wcsrchr
strtoul
ungetc
vswprintf
wcsncpy
getenv
fseek
mbtowc
realloc
__setusermatherr
strcspn
__getmainargs
isdigit

comdlg32

PrintDlgW
ChooseColorW
GetFileTitleW
GetOpenFileNameW

gdi32

Polygon
SetBitmapDimensionEx
GetTextExtentPoint32A
EnumFontFamiliesExW
GetTextExtentExPointW
SetBrushOrgEx
GetMapMode
LineDDA
PathToRegion
GetROP2
CreateICW
BeginPath
Rectangle
GetWindowOrgEx
BitBlt
GetNearestColor
PtVisible
SetMapMode
CreateFontIndirectW
AddFontResourceW
CreateHalftonePalette
ScaleViewportExtEx
ExtFloodFill
UnrealizeObject
CreateFontIndirectA
SetPixel
CreatePenIndirect
EnumFontFamiliesW
GetCharWidth32W
PolyBezier
CreateDIBitmap
CreateFontW
DPtoLP
GetTextExtentPointA
SetViewportExtEx
SelectClipRgn
WidenPath
EndDoc
SaveDC
ExcludeClipRect
SetPaletteEntries
GetStockObject
GetObjectA
StartPage

psapi

GetProcessImageFileNameW

Exports

Exports

?CancelFilePathW@@YGXJNPAK]A
?RtlComponentW@@YGPAFNM]A

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.packed
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84e5f18105afc462363e8514c092cc12

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

kernel32

msvcrt

comdlg32

gdi32

psapi

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 192KB

.packed Size: 13KB - Virtual size: 13KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 192KB - Virtual size: 192KB

.packed
Size: 13KB - Virtual size: 13KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 2KB