d1f5fb4a4cefad7c09ce99a34ba41d4d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d1f5fb4a4cefad7c09ce99a34ba41d4d_JaffaCakes118
Size

208KB
MD5

d1f5fb4a4cefad7c09ce99a34ba41d4d
SHA1

c613e9dc3e6a8cadaa07b94d1bee8fe3a751fc44
SHA256

641f2cabde95b1114576cf35c173913adeddcf3c0572072b05bbc507978ad52f
SHA512

90786c1c83a147a03a9db4b54802fe65329a25214acc52ad3ca02d6239dfcb457a975dfe7ce93787048a80949ed92f570e7f606598ae182a225dfb2a8d1b5470
SSDEEP

6144:2PIscDLYtVvi4O1uOmOj4MevtLkYu5VMTzHiI:EQD6VS5mievel5ed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1f5fb4a4cefad7c09ce99a34ba41d4d_JaffaCakes118

Files

d1f5fb4a4cefad7c09ce99a34ba41d4d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

31329a511ee750d717d937c49d551ba0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\hOclQCeGahxtjP\ZkKopnM\apVVxgvRU\xlxdKNx.pdb

Imports

comctl32

ImageList_AddMasked
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Draw
DestroyPropertySheetPage

msvcrt

putc
sscanf
strtol
atoi
_controlfp
iswprint
fwrite
fseek
setvbuf
strpbrk
wcstombs
strerror
swscanf
__set_app_type
localtime
__p__fmode
__p__commode
time
_amsg_exit
_initterm
isupper
wcscspn
printf
sprintf
_acmdln
floor
exit
toupper
gmtime
_ismbblead
_XcptFilter
wcsncpy
strstr
_exit
_cexit
isspace
__setusermatherr
wcscmp
__getmainargs

kernel32

GetNumberFormatA
GetFileSize
AreFileApisANSI
GetTickCount
lstrcpyW
GlobalGetAtomNameW
CompareStringA
CompareFileTime
EnumResourceTypesA
lstrlenW
GetCommTimeouts
CancelIo
HeapWalk
CreateWaitableTimerA
GetUserDefaultUILanguage
TransactNamedPipe
BuildCommDCBAndTimeoutsW
GetTimeFormatW
FormatMessageA
CopyFileA
ResetEvent
GetFileAttributesExW
SetFileTime
lstrcpynA
FindNextFileW
GetLocaleInfoW
GlobalFree
FindCloseChangeNotification
SetLocalTime
GetLongPathNameW
GlobalHandle
GetModuleFileNameA
HeapUnlock
GetModuleFileNameW
ConnectNamedPipe
SetFileAttributesW
HeapSize
GetComputerNameExA
GetHandleInformation
UnlockFile
GetBinaryTypeW
GetVersion

gdi32

CreateHalftonePalette
SetDIBitsToDevice
SetBrushOrgEx
SetMapMode
SetBkMode
GetTextExtentPoint32W
DeleteObject
GetObjectA
GetCharWidth32W
CreateBrushIndirect
StretchBlt
SetBkColor
PolyBezier
PtVisible
SetTextAlign
Ellipse
GetDIBits
SelectObject
GetPaletteEntries
GetTextMetricsA
WidenPath
GetTextExtentPoint32A
CreateSolidBrush
GetMapMode
ExtTextOutW
Escape
Polygon
CreateFontA
UnrealizeObject
CreateDIBSection
GetStockObject
GetTextMetricsW
RectInRegion
GetBitmapBits
EnumFontFamiliesExW

user32

ClipCursor
LoadCursorW
DrawFocusRect
RegisterClassExW
ArrangeIconicWindows
CharNextExA
ScreenToClient
ShowCursor
ShowScrollBar
CharToOemA
IsIconic
SwitchToThisWindow
DestroyMenu
GetDlgItem
CharUpperA
GetDC
WaitForInputIdle
MessageBoxW
GetPropW
OemToCharA
SetWindowLongW
SetMenu
ShowCaret
MessageBoxExA
GetDialogBaseUnits
CheckRadioButton
GetWindowTextLengthW
SetPropW
GetNextDlgTabItem
GetSystemMenu
SendMessageA
LoadBitmapW
GetSubMenu
DestroyWindow
SendMessageW
FindWindowW
LoadImageW
SetWindowPos
CascadeWindows
AllowSetForegroundWindow
ScrollWindow
CreateDialogIndirectParamW
PostThreadMessageA
IsWindowUnicode
DrawTextA
OffsetRect
GetMenuItemID
CheckDlgButton
GetKeyboardType
PostMessageW
LoadAcceleratorsW
IsWindow
CheckMenuRadioItem
WindowFromPoint
MapVirtualKeyW
AdjustWindowRectEx
ToUnicodeEx
GetClipCursor
SetScrollPos
DestroyCaret
SendMessageTimeoutW
ActivateKeyboardLayout
GetUpdateRgn
GetWindowLongA
RegisterWindowMessageA
SetActiveWindow
GetClientRect
CharUpperW
PeekMessageA
MoveWindow
CreateMenu
EnableMenuItem
GetActiveWindow
InSendMessage
GetClassInfoW
GetWindow
GetClassInfoExW
DrawAnimatedRects
UnionRect
DragObject
DefWindowProcA
DrawMenuBar
SendInput
IsRectEmpty
IsCharLowerA
GetScrollRange
CreateWindowExA
GetMessageTime
GetClassInfoExA

shlwapi

PathStripPathW

Exports

Exports

?SleepAhHJDud@@YGKEPA_WG@Z
?SleepUDSUDlkdlsds@@YGKEPA_WG@Z
?SleepUDudjkUD@@YGKEPA_WG@Z
?SleepYDyjDuUI@@YGKEPA_WG@Z

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 323B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31329a511ee750d717d937c49d551ba0

Headers

File Characteristics

PDB Paths

Imports

comctl32

msvcrt

kernel32

gdi32

user32

shlwapi

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.edata Size: 512B - Virtual size: 323B

.data Size: 19KB - Virtual size: 19KB

.rdata Size: 1024B - Virtual size: 63KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 75KB - Virtual size: 74KB

.edata
Size: 512B - Virtual size: 323B

.data
Size: 19KB - Virtual size: 19KB

.rdata
Size: 1024B - Virtual size: 63KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 2KB - Virtual size: 1KB