db57575950bdd6cd54cf32ae21879612_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

db57575950bdd6cd54cf32ae21879612_JaffaCakes118
Size

741KB
MD5

db57575950bdd6cd54cf32ae21879612
SHA1

6790047060da1644cf0b70cd76dc5fc1d11e2589
SHA256

936c6e04e3a414174e746d868af364ec8b9e5fae2450e9d958bdd10a18101a45
SHA512

77f611c64d7dfc6c506a0e5470a335dce7f7794b7dbe4ae54924c7220c9a607b94ca04e7583dbb3960953e63defb51458331f619400f780964d4a49ef239420a
SSDEEP

12288:Y85BsTSj9YZQ+ce+ia1XCc6wiSo9ED0zm0xi+np8hZxW5QM6wGEdxlJbX:Y8sOZYG+z/Fbwirq0xi+p80D/bX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db57575950bdd6cd54cf32ae21879612_JaffaCakes118

Files

db57575950bdd6cd54cf32ae21879612_JaffaCakes118
.dll windows:5 windows x86 arch:x86

eed919025583b3c40ebaea0158bbb10c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\FkqekdYeVaiwo\raKidju\hmifuzWvVtdBjb\tpjirgdMchzor.pdb

Imports

shlwapi

StrToIntA

msvcrt

wcstod
fputs
iswalpha
setvbuf
_controlfp
__set_app_type
isalnum
__p__fmode
strtol
free
strerror
__p__commode
_amsg_exit
_initterm
strcoll
strrchr
clearerr
fputc
system
_ismbblead
iswprint
bsearch
wcstombs
_XcptFilter
sscanf
atoi
memset
_exit
swprintf
isprint
strtok
atol
wcsstr
isupper
calloc
getenv
iswxdigit
mbstowcs
strpbrk
_cexit
strcspn
wcsncmp
vsprintf
__setusermatherr
__getmainargs
mbtowc
fprintf
iswctype

kernel32

LCMapStringA
SetFileAttributesA
CreateFileMappingW
SetCommState
CreateFileA
CompareFileTime
GetProcAddress
FindNextFileW
IsBadWritePtr
GetSystemWindowsDirectoryA
GetStdHandle
GetVersionExA
lstrcpynW
GetProcessHeap
LockResource
SetFilePointer
CreateSemaphoreA
CompareStringA
SetHandleCount
lstrcatA
GetThreadPriority
lstrcmpA
GetTickCount
GetVersionExW
LoadLibraryExW
HeapLock
GlobalDeleteAtom
lstrcatW
SetNamedPipeHandleState
VerSetConditionMask
GetCommState
GlobalMemoryStatusEx
HeapAlloc
SetWaitableTimer
ClearCommError
AreFileApisANSI
GlobalFindAtomW
GetTempFileNameW
HeapFree
SetEvent
GetTimeZoneInformation
GetLocaleInfoA
CreateWaitableTimerA
GetLocalTime
LockFile
GlobalMemoryStatus
OpenFileMappingA
MulDiv
GetTempPathW
GlobalGetAtomNameA
ExitThread
FindFirstChangeNotificationW
GetComputerNameA
lstrcpyW
CancelIo
GetModuleFileNameA
EnumSystemLocalesA
GetModuleFileNameW

user32

ShowCaret
GetSystemMetrics
RegisterClassA
GetDlgCtrlID
SetFocus
DefDlgProcW
GetWindowRect
RemoveMenu
GetKeyboardLayout
IsWindowUnicode
DialogBoxIndirectParamW
GetParent
MessageBoxExW
LoadCursorA
CreatePopupMenu
CreateWindowExA
GetClassInfoW
InvalidateRect
GetDlgItem
EndDialog
CheckRadioButton
IsDlgButtonChecked
CharNextW
DrawTextA
CharNextA
MapVirtualKeyW
DragObject
SetRect
SetWindowPlacement
GetDlgItemInt
OemToCharBuffA
GetMenuState
TranslateAcceleratorW
ClientToScreen
FillRect
RegisterWindowMessageW
CharToOemA
VkKeyScanW
GetAsyncKeyState
ScrollWindowEx
CharLowerBuffW
CheckDlgButton
PostThreadMessageA
GetDlgItemTextW
DestroyCursor
SetForegroundWindow
SetDlgItemTextW
GetMenu
SetRectEmpty
MoveWindow
EnumThreadWindows
DestroyAcceleratorTable
LookupIconIdFromDirectory
CreateIconFromResource
IsWindowEnabled
ValidateRect
CreateMenu
LoadCursorW
FindWindowA
WindowFromPoint
MonitorFromRect
SwitchToThisWindow
SetSysColors
GetFocus
GetKeyboardLayoutList
GetKeyboardLayoutNameW
OpenIcon
TrackPopupMenuEx
GetMenuItemRect
ActivateKeyboardLayout
AppendMenuA
HiliteMenuItem
InternalGetWindowText
MessageBoxA
GetActiveWindow
MapWindowPoints
CloseDesktop
LoadBitmapA
SetLastErrorEx
RemovePropW
CreateDialogParamA
GetWindowLongA
RegisterClassW
GetAltTabInfoA
SetDlgItemTextA
DrawStateW
IsChild
InSendMessageEx
EqualRect
CharToOemW
GetClassNameW
ClipCursor
SystemParametersInfoA
PostMessageA
GetWindowPlacement
IsRectEmpty
SendNotifyMessageW
SetScrollInfo
GetForegroundWindow
OemToCharA
PeekMessageA
LoadAcceleratorsA
CallWindowProcA
GetClassLongW
GetSysColor
MapVirtualKeyExW
ShowCursor
LoadBitmapW
IsIconic
MapVirtualKeyA
SetWindowPos
GetMessageExtraInfo
IsZoomed
GetKeyboardType
DrawTextW
CreateAcceleratorTableW
OpenInputDesktop
DispatchMessageW
DrawFrameControl
GetSystemMenu
RedrawWindow
EnableMenuItem
DrawStateA

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetFileTitleW
PrintDlgW
ReplaceTextW
GetOpenFileNameA

Exports

Exports

showtit[D
?SetDrawMaterialOOpsw@@YGK_KHE[D

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 710KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eed919025583b3c40ebaea0158bbb10c

Headers

File Characteristics

PDB Paths

Imports

shlwapi

msvcrt

kernel32

user32

comdlg32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 1.3MB

.rsrc Size: 710KB - Virtual size: 709KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 1.3MB

.rsrc
Size: 710KB - Virtual size: 709KB

.reloc
Size: 1KB - Virtual size: 1KB