d3f6ac44ecedfa2d9786a305f3f84d19_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d3f6ac44ecedfa2d9786a305f3f84d19_JaffaCakes118
Size

57KB
MD5

d3f6ac44ecedfa2d9786a305f3f84d19
SHA1

dc6141c3400cb968f719369a0996c55d9a903776
SHA256

e1e055523e85882532255868adc083402c1015bb96c582044807d603e578b06d
SHA512

f9478540fc1a29b23e04e3ebf5db8b1d2142536ef4161c5b6d0402dc140409384afe9bdbaafabb0835373169753ad45b0c45495c8046218f4ef34bfff19273d2
SSDEEP

768:XN402K4YgZ0vS0Be06Zmbkx+uR8pNQVnxFCKIqavKCO23aJr25mJ+r8nNxjnJL/b:XxJgZsjWo2HuqE3p5br8nLjZdqE1H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3f6ac44ecedfa2d9786a305f3f84d19_JaffaCakes118

Files

d3f6ac44ecedfa2d9786a305f3f84d19_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8eea45bec2df0d6cb7d4683320842c35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\HpstkKCyeaYpa\fxwbnfgEo\npUfrisqZnu\teKPhjkPetxeKP\BVuezgsl.pdb

Imports

msvcrt

mktime
_controlfp
__set_app_type
system
strncmp
wcsstr
malloc
wcscmp
gmtime
strstr
wcsncpy
strncpy
strtok
__p__fmode
calloc
fclose
qsort
rand
wcstombs
wcscoll
putc
wcscat
__p__commode
wcsrchr
_amsg_exit
fread
getc
strspn
free
fgets
iswalpha
getenv
strchr
_initterm
isalnum
_ismbblead
realloc
wcscspn
sprintf
_XcptFilter
mbtowc
_exit
fflush
exit
_cexit
__setusermatherr
__getmainargs

kernel32

GetThreadContext
ClearCommBreak
HeapReAlloc
SetCurrentDirectoryW
SearchPathW
UnlockFile
GetSystemTimeAsFileTime
lstrcatW
CancelIo
lstrcmpA
GetSystemDefaultLangID
GetTempPathA
GetModuleFileNameA
GetLongPathNameW
SetFilePointer
CopyFileW
CompareStringA
GetComputerNameExW
CreateEventA
FoldStringW
CreateWaitableTimerW
GlobalFindAtomW
GetVersionExA
ResumeThread
SetNamedPipeHandleState
RegisterWaitForSingleObject
TlsFree
CreateDirectoryA
LocalUnlock
OpenEventA
GetProcAddress
GetSystemDefaultUILanguage
GlobalLock
FindNextFileA
GetFileAttributesA
GetFileSize
GetLocaleInfoW
IsDBCSLeadByte
LoadLibraryA
FindNextFileW
GlobalDeleteAtom
SetSystemTime
WaitCommEvent
FileTimeToSystemTime
LocalSize
FindCloseChangeNotification
EnumResourceNamesW
SetTimerQueueTimer
GetSystemDirectoryW
ExitThread
SetThreadPriority
CreateMutexA
GetCommandLineA
LCMapStringW
OpenFileMappingA

user32

MapWindowPoints
SetMenu
DeferWindowPos
DrawFrameControl
RemoveMenu
RedrawWindow
DefFrameProcA
SetMenuItemBitmaps
OemToCharA
CharUpperBuffW
MessageBoxExW
SetScrollInfo
ChangeMenuW
GetNextDlgGroupItem
LoadImageW
IsDialogMessageA
EnumWindows
SetTimer
CreateMenu
GetWindowTextLengthW
ScrollWindowEx
DrawStateA
SystemParametersInfoA
GetMenuState
UpdateWindow
LoadIconW
SetWindowPos
CharUpperW
MapVirtualKeyA
InvalidateRgn
ShowWindow
RegisterClassW
LookupIconIdFromDirectory
VkKeyScanW
WaitForInputIdle
EndDialog
GetMenuItemInfoW
GetDlgItemTextA
ShowScrollBar
GetClassInfoA
OemToCharBuffA
IsCharAlphaA
IsWindowVisible
GetKeyNameTextW
SetCursor
CharNextA
SendMessageA
CopyRect
IsRectEmpty
SetForegroundWindow
AdjustWindowRect
EndPaint
DrawStateW
GetAsyncKeyState
CheckMenuRadioItem
CreateIconIndirect
wsprintfW
TranslateMessage
PostThreadMessageW
KillTimer
CharToOemW
UnionRect
DrawIconEx
DestroyWindow
CharToOemBuffA
HideCaret
GetMessagePos
GetFocus
SetWindowLongW
DefWindowProcA
GetMessageA
GetUserObjectInformationA
SendDlgItemMessageA
MapVirtualKeyW
ToUnicodeEx
InternalGetWindowText
GetDlgItem
EnableMenuItem
RegisterClassExW
OpenIcon
LoadBitmapA
CharUpperBuffA
IsCharAlphaNumericW
GetParent
DrawTextA
InvalidateRect
ScrollWindow
BringWindowToTop
SetDlgItemTextW
SetSysColors
SendDlgItemMessageW
IsWindow
IsZoomed
DefDlgProcA
OpenDesktopW
CheckMenuItem
GetLastActivePopup
CopyImage
GetUpdateRect
GetWindowLongA
IsDialogMessageW
CharUpperA
GetActiveWindow
GetSysColor
LoadStringW
TabbedTextOutW
CharLowerA
RemovePropW
CreateDialogIndirectParamW
CharToOemA
LoadMenuA
CreatePopupMenu
RegisterClassA
DrawMenuBar
LoadStringA
wvsprintfW
EnableScrollBar
SystemParametersInfoW
SendInput
RegisterClassExA
CloseDesktop

Exports

Exports

?DialogReactivateIns@@YGK_KHE[D

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8eea45bec2df0d6cb7d4683320842c35

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.idata Size: 6KB - Virtual size: 5KB

.edata Size: 512B - Virtual size: 112B

.data Size: 2KB - Virtual size: 24KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.idata
Size: 6KB - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 112B

.data
Size: 2KB - Virtual size: 24KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 1KB - Virtual size: 1KB