cedc38282e315f653daff978871ed455_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

cedc38282e315f653daff978871ed455_JaffaCakes118
Size

148KB
MD5

cedc38282e315f653daff978871ed455
SHA1

1abf96b2351c7f887647a7e53bee7613573ce79b
SHA256

4f164dc0bd5416bb7a5cd561f40ffc9d663441ef5331443649efd838ef0f51d1
SHA512

98bfc0c00b7728279734bd59f46a4ec80d9de54df309d0e200ea9165c40525c107029fba4d1cb1570db34d3e50dbcb084321e76383d03211b1f1dbdb6a56844f
SSDEEP

3072:FA77Tx/G/5sdtMX76qun2RM9rSA9Myp/IzL71xNYM38gEuGU:FA77ndMtun2mdSACG/IzlxY3ud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cedc38282e315f653daff978871ed455_JaffaCakes118

Files

cedc38282e315f653daff978871ed455_JaffaCakes118
.exe windows:5 windows x86 arch:x86

32b6e640ef84a3d398dc8cb516c519be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\uvqGVtkhCf\ewvYsvvvp\IDtuLJZl.pdb

Imports

shlwapi

StrToIntW

kernel32

GlobalHandle
OpenEventW
GetModuleFileNameW
ConnectNamedPipe
GetThreadPriority
GetCommandLineA
HeapAlloc
GetSystemDirectoryA
GlobalAlloc
SearchPathW
GetStartupInfoW
GetCurrentThreadId
GetAtomNameW
GlobalGetAtomNameA
GetModuleHandleA
CompareStringA
GetFileAttributesExW
GetAtomNameA
CreateFileA
RemoveDirectoryW
ExitThread
GetLocalTime
GetUserDefaultUILanguage
FreeLibrary
WaitForSingleObject
HeapWalk
GetFullPathNameA
lstrlenW
CreateRemoteThread
CreateDirectoryA
GetFileAttributesA
GetModuleHandleW
PulseEvent
VerifyVersionInfoW
HeapValidate
IsBadCodePtr
SearchPathA
EnumResourceLanguagesA
HeapFree
GetCommState
GetUserDefaultLangID
GlobalCompact
TryEnterCriticalSection
FindFirstFileW
GetTempFileNameW
EnumSystemLocalesA
SetCommState
GetProcessHeap
LoadLibraryW
GlobalSize
GetCommTimeouts
GetSystemTimeAdjustment
GetDateFormatA
CreateEventW
VirtualQuery
CloseHandle
GetCommandLineW
FormatMessageW

user32

IsChild
OpenDesktopW
InsertMenuItemW
CharUpperA
CharToOemW
AdjustWindowRectEx
KillTimer
DragObject
CreatePopupMenu
GetSystemMenu
LoadCursorW
GrayStringW
SetCaretPos
MessageBoxExW
MapDialogRect
SendMessageTimeoutW
MapVirtualKeyW
WindowFromPoint
LoadStringW
SetWindowRgn
GetWindowTextW
DestroyMenu
VkKeyScanW
CascadeWindows
IntersectRect
EnableMenuItem
CreateIconIndirect
MessageBoxExA
CreateDialogIndirectParamW
SetForegroundWindow
CharPrevA
GetCaretBlinkTime
GetScrollPos
CharNextW
GetScrollRange
RegisterWindowMessageA
GetIconInfo
DrawIcon
SetFocus
DestroyIcon
SetDlgItemTextW
CopyRect
GetDlgItemTextW
DrawIconEx
CallWindowProcA
SendDlgItemMessageW
DrawEdge
GetUpdateRect
ScrollWindow
OpenInputDesktop
GetFocus
keybd_event
GetDlgItem
DefFrameProcA
LoadIconW
GetWindowLongW
OpenIcon
GetMessageTime
LoadBitmapW
RegisterClassExA
SendMessageTimeoutA
SetActiveWindow
SystemParametersInfoA
GetMenuCheckMarkDimensions
GetPropW
GetAsyncKeyState
DefWindowProcW
IsIconic
CheckDlgButton
BeginDeferWindowPos
CloseDesktop
GetKeyboardLayout
PeekMessageA
SetDlgItemInt
SetMenuItemInfoW
CharToOemA
IsDialogMessageA
GetMessageExtraInfo
PostThreadMessageW
RegisterClassExW
OffsetRect
CharPrevW
DestroyCursor
WaitMessage
MapWindowPoints
IsRectEmpty
CreateDialogParamA
GetMenuStringW
GetGUIThreadInfo
SendInput
DestroyAcceleratorTable
MoveWindow
GetClassNameW
GetScrollInfo
DrawStateW
GetNextDlgTabItem
GetDoubleClickTime
MapVirtualKeyExW
IsWindowVisible
CharLowerA
GetUserObjectInformationA
MonitorFromRect
GetWindowModuleFileNameW
RegisterHotKey
UnloadKeyboardLayout
GetSysColor
IsCharAlphaNumericW
GetWindowDC
SetScrollInfo
FrameRect
AppendMenuW
TranslateMessage
DrawMenuBar
GetSysColorBrush
GetActiveWindow
CreateAcceleratorTableW
GetDCEx
BeginPaint
GetSubMenu
DrawFocusRect
ChildWindowFromPoint
GetUserObjectInformationW
GetNextDlgGroupItem
UnionRect
GetClassLongA

msvcrt

fgets
atol
puts
wcstoul
srand
_controlfp
ftell
__set_app_type
strncmp
iswspace
wcslen
floor
swprintf
wcscspn
__p__fmode
__p__commode
fprintf
wcstol
strrchr
localtime
strspn
_amsg_exit
wcstod
wcspbrk
wcscoll
time
free
memset
_initterm
_ismbblead
isprint
_XcptFilter
_exit
wcstombs
isupper
iswdigit
iswprint
tolower
wcscmp
sprintf
_cexit
swscanf
__setusermatherr
clearerr
strncpy
islower
__getmainargs
ungetc

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32b6e640ef84a3d398dc8cb516c519be

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 63KB

.data Size: 15KB - Virtual size: 128KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 66KB - Virtual size: 65KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 63KB - Virtual size: 63KB

.data
Size: 15KB - Virtual size: 128KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 66KB - Virtual size: 65KB

.reloc
Size: 2KB - Virtual size: 1KB