d2df9cad14d10992e6c363cc90d304ab_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2df9cad14d10992e6c363cc90d304ab_JaffaCakes118
Size

221KB
MD5

d2df9cad14d10992e6c363cc90d304ab
SHA1

8eff6e8bd6404c1bfd39ac0dc322ac9f8cc25c33
SHA256

4ba8e44f79539717de9a028c44f6aff193f583fd459d00877174677f75c93e03
SHA512

fdc09f87455c80c36f1f31f509b9bb6a1e582c6461422074d92a738af1c59fbb310da3242cabc5351d9e88f5654bbed4d583d6b00d00a8701ce80c6b9c385279
SSDEEP

6144:ZEdHCrWQ8Lzd0EmQJvM/Rlk9u86EUu+iETO2T2O:jaxddmtYA81xETO2T2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2df9cad14d10992e6c363cc90d304ab_JaffaCakes118

Files

d2df9cad14d10992e6c363cc90d304ab_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cfad7c7033898de361eaa2000f31a69b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\qgHHnnoggmjl\EwnuyYYtKa\apuwhPNyfiq.pdb

Imports

gdi32

EnumFontFamiliesW
CreateEllipticRgnIndirect
GetRgnBox
ResizePalette
CreateFontIndirectW
PatBlt
GetDIBits
RestoreDC
CreatePalette
GetLayout
BitBlt
CreateRectRgn
IntersectClipRect
GetTextExtentPointW
GetTextExtentExPointW
DeleteDC
GetPixel
SetAbortProc
SetTextColor
StretchBlt
SetDIBitsToDevice
SetTextAlign
SetPaletteEntries
CreateCompatibleBitmap
SaveDC
RealizePalette
EndDoc
CreateDiscardableBitmap
CreatePenIndirect
SetBkColor
CreatePatternBrush
CreateBitmapIndirect
CreateRoundRectRgn
SetViewportOrgEx
GetTextFaceW
Polyline
SetRectRgn
SetBkMode
SetBitmapDimensionEx
SetROP2
WidenPath
PolyBezier
StartPage
CreateCompatibleDC
GetNearestPaletteIndex
CombineRgn

kernel32

GlobalHandle
GetCurrentDirectoryW
SetEvent
GetSystemWindowsDirectoryA
HeapWalk
lstrlenW
CreateEventA
FindNextFileA
GetThreadTimes
lstrcmpA
LoadLibraryW
SetCurrentDirectoryA
GetSystemInfo
CopyFileW
HeapCreate
CancelIo
lstrcmpW
VerifyVersionInfoW
FindResourceA
GetCommConfig
DeviceIoControl
DuplicateHandle
GetSystemWindowsDirectoryW
GetModuleFileNameA
GlobalLock
DisconnectNamedPipe
GetStdHandle
GetShortPathNameW
VerSetConditionMask
GetFullPathNameW
FileTimeToLocalFileTime
FlushFileBuffers
IsBadCodePtr
LocalAlloc
SetThreadPriority
CreateFileA
LeaveCriticalSection
GetProcAddress
FindFirstFileA
GlobalFindAtomW
SetUnhandledExceptionFilter
HeapValidate
GetFileAttributesA
lstrcpyW
CreateThread
ReadFile
GetTimeFormatA
SetCommMask
IsValidLocale
GetLocaleInfoA

user32

SetMenu
GrayStringW
GetDesktopWindow
MapWindowPoints
VkKeyScanW
EnableScrollBar
FindWindowExW
SetScrollRange
DrawFrameControl
LoadBitmapW
GetSysColor
ReleaseDC
GetMenuStringW
InsertMenuA
MessageBoxA
ModifyMenuW
MapDialogRect
CharLowerW
KillTimer
SendDlgItemMessageA
GetDCEx
SetWindowLongW
SetWindowPos
CreatePopupMenu
GetKeyboardType
RegisterWindowMessageW
EnableMenuItem
HiliteMenuItem
GetCursorPos
GetUpdateRgn
LookupIconIdFromDirectory
TabbedTextOutW
GetParent
IsDialogMessageA
UnloadKeyboardLayout
GetFocus
SetMenuDefaultItem
FrameRect
DefDlgProcW
RegisterClassExA
GetMenuItemCount
DeleteMenu
MapVirtualKeyA
CallWindowProcA
MessageBoxExA
GetMessageA
SetCursor
IsCharAlphaNumericW
InternalGetWindowText
GetClassInfoA
GetNextDlgGroupItem
CreateDialogIndirectParamW
RegisterClassA
InvertRect
ShowOwnedPopups
GetWindow
RegisterClassW
MoveWindow
CallWindowProcW
GetDlgItemInt
DialogBoxParamW
GetDlgCtrlID
LoadBitmapA
GetMenuState
MonitorFromPoint
GetDlgItem
GetAsyncKeyState
CreateIconFromResource
EndTask
GetSubMenu
DialogBoxIndirectParamW
GetMessageExtraInfo
CharPrevA
DialogBoxParamA
SetUserObjectInformationW
ChangeMenuW
SetScrollPos
SetDlgItemInt
RedrawWindow
ValidateRect
IsWindow
TranslateMessage
OpenIcon
AppendMenuW
SetWindowTextA
GetWindowPlacement
CascadeWindows
GetScrollInfo
IsWindowVisible
DefDlgProcA
ScreenToClient
RegisterClassExW
wvsprintfW
GetSysColorBrush
LoadCursorA
GetTopWindow
CreateCursor
GetMenuItemID
DefFrameProcW
GetClassNameW
GetClassInfoExA
LoadAcceleratorsA
LoadMenuA
GetWindowTextA
ToUnicodeEx
InSendMessageEx
UpdateWindow
SendMessageW
SendMessageA
CharNextExA

msvcrt

_controlfp
iswctype
wcstok
realloc
ftell
wcspbrk
putchar
fputs
isspace
__set_app_type
calloc
__p__fmode
wcstod
fflush
malloc
time
wcscspn
wcstol
__p__commode
remove
wcsncmp
_amsg_exit
srand
_initterm
_ismbblead
wcscat
_XcptFilter
iswprint
strcspn
_exit
fgets
_cexit
free
mbstowcs
__setusermatherr
islower
fprintf
wcscpy
clearerr
__getmainargs
wcsstr
gets
qsort
fgetc

Exports

Exports

?DecrementProviderExW@@YGPADPAFK[W

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.packed
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfad7c7033898de361eaa2000f31a69b

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 186KB - Virtual size: 186KB

.packed Size: 13KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 186KB - Virtual size: 186KB

.packed
Size: 13KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 2KB - Virtual size: 1KB