df1e1bfc34419b021259ea5a366750ad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

df1e1bfc34419b021259ea5a366750ad_JaffaCakes118
Size

219KB
MD5

df1e1bfc34419b021259ea5a366750ad
SHA1

85c8e7041c1b9f4ab4ef5492d6e48c61d6725f24
SHA256

1dceeaebaa35adca3196d518ec05cbd4cba22c334e282aaf8619d467f52b7b3e
SHA512

94b714805172e492477a4c6eb233e3b446006cff7548ff39f91c90451e617456787b8dd044362ebd2874a96b90183c00b21273ac754f944d57cf1ad370571910
SSDEEP

6144:XY05VCb+5xnBuFQ7lT7UxAZtCIwwMVL8DCfeGqvh:XTVnnwSV4xQ9wwMVLMNGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df1e1bfc34419b021259ea5a366750ad_JaffaCakes118

Files

df1e1bfc34419b021259ea5a366750ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c83ea60ec156c17a59c84b59cf5f15a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\FfeKhndeHAsi\vFtiroRppzu\Orimzsp\uibcBwkB.pdb

Imports

msvcrt

strrchr
toupper
_controlfp
ftell
__set_app_type
wcstod
iswdigit
wcscpy
fgetc
__p__fmode
strtoul
putc
isdigit
isalpha
getenv
__p__commode
tolower
wcschr
mbtowc
free
_amsg_exit
_initterm
isxdigit
_acmdln
fseek
isspace
clearerr
mbstowcs
iswalpha
sscanf
clock
fflush
wcscoll
exit
wcsrchr
_ismbblead
isupper
_XcptFilter
strstr
_exit
_cexit
wcslen
iswprint
__setusermatherr
__getmainargs
remove

kernel32

GetSystemDefaultUILanguage
FindResourceExW
LCMapStringA
SuspendThread
GetVersion
GetSystemDefaultLangID
GetLastError
GetStartupInfoW
DeleteFileA
lstrcatA
RemoveDirectoryA
HeapAlloc
IsBadReadPtr
GetCommProperties
CreateFileW
FindResourceA
GetSystemInfo
GetModuleFileNameA
CreateNamedPipeW
FindNextChangeNotification
GetModuleFileNameW
GetDateFormatA
GetWindowsDirectoryW
GetTempPathW
HeapCreate
IsValidLanguageGroup
GetFileType
FreeResource
lstrcmpiA
LocalSize
GetComputerNameA
LoadResource
LocalFree
GetThreadLocale
WaitForMultipleObjectsEx
ConnectNamedPipe
GetProcessHeap
GetAtomNameA
GetWindowsDirectoryA
CreatePipe
TlsFree
SleepEx
GetVersionExA
FormatMessageW
LoadLibraryW
GetThreadContext
GetFileSize
GlobalLock
LockResource
FindFirstChangeNotificationW
lstrcmpW
GetTimeZoneInformation
lstrcpynW
GetCurrentThreadId
GlobalCompact
HeapFree
GetStartupInfoA

gdi32

GetTextExtentExPointW
ExtTextOutA
WidenPath
SetAbortProc
TextOutW
GetTextExtentPointA
CreateDiscardableBitmap
SelectClipRgn
PtVisible
CreateBitmap
CreateICW
GetNearestPaletteIndex
CreateBitmapIndirect
Polyline
CreateDIBitmap
CreateHalftonePalette
GetWindowOrgEx
LineDDA
GetCharWidth32W
CreateRoundRectRgn
GetCurrentObject
ExtTextOutW
LPtoDP
GetDIBits
SetDIBitsToDevice
UnrealizeObject
GetClipBox
IntersectClipRect
CreateDIBSection
SetROP2
EndPage
GetTextMetricsW
GetSystemPaletteUse
CreateCompatibleDC
RealizePalette
OffsetRgn
Rectangle
CreateFontIndirectA
GetBitmapBits
CreateFontIndirectW
CreateEllipticRgnIndirect
GetSystemPaletteEntries
GetDeviceCaps
RemoveFontResourceW
SaveDC
GetStockObject
SetWindowOrgEx

user32

TranslateAcceleratorW
CreatePopupMenu
GetWindow
ShowCursor
GetParent
SetWindowPos
CreateCursor
SendMessageTimeoutW
DestroyCursor
GetKeyNameTextW
ShowOwnedPopups
EnableScrollBar
RegisterClassA
GetLastActivePopup
MapVirtualKeyA
DrawMenuBar
GetWindowTextLengthW
DestroyIcon
RegisterClassExA
VkKeyScanW
FindWindowA
MapDialogRect
DrawAnimatedRects
GetClassInfoExA
SetFocus
RedrawWindow
IsDlgButtonChecked
ToUnicodeEx
AppendMenuW
BringWindowToTop
CopyImage
UnionRect
InternalGetWindowText
GetDlgCtrlID
MapVirtualKeyExW
GetClassInfoExW
AdjustWindowRectEx
InflateRect
DefWindowProcA
RegisterClassExW
TileWindows
RegisterWindowMessageW
IsWindowEnabled
PostQuitMessage
GetMenu
SetUserObjectInformationW
DeferWindowPos
SendMessageTimeoutA
EnumWindows
CopyAcceleratorTableW
GetClassLongA
IsWindowVisible
IntersectRect
GetDC
LoadStringA
MapWindowPoints
GetDlgItemTextA
CharToOemW
IsZoomed
ScreenToClient
CharToOemBuffA
CreateDialogParamA
SetWindowTextW
GetScrollPos
EnableWindow
AppendMenuA
GetTopWindow
ChildWindowFromPoint
GetDesktopWindow
SetRectEmpty
SetScrollPos
HideCaret
DestroyCaret
CallWindowProcA
MoveWindow
RegisterWindowMessageA
LoadAcceleratorsW
GetSysColor
DragObject
SetCursor
GetKeyboardLayoutNameW
wvsprintfA
GetKeyboardType
PostMessageA
SetMenuDefaultItem
CharUpperW
DrawFocusRect
IsCharUpperA
GetCursorPos
DrawFrameControl
GetMenuState
IsCharAlphaW
IsMenu
FillRect
GetClipCursor
DefWindowProcW
MessageBoxExA
GetMenuStringW
ArrangeIconicWindows
DrawIconEx
GetSysColorBrush
SetScrollInfo
GetDlgItemInt
RegisterClassW
GetDlgItemTextW
SendDlgItemMessageW
CharPrevA
CreateWindowExW
LoadStringW
OpenInputDesktop
GetMessagePos
GetNextDlgGroupItem

Exports

Exports

?OnListItem@@YGFPAG_NF]A
?IsValidConfigNew@@YGNPAHPAHHH]A
?IsProfileExA@@YGF_NPANDM]A
?DeletePenOriginal@@YGDHPAKID]A
?ShowTimeA@@YGFF]A
?InvalidateDeviceExW@@YGEEKGK]A
?IsValidProviderExA@@YGKH]A
?RtlSemaphoreOld@@YGXDD]A
?CopyFunctionOld@@YGDF]A
?DecrementDirectoryW@@YGXMMPADM]A
?PutPathOld@@YGJGK]A
?ShowPath@@YGKGN]A
?FindKeyboardEx@@YGFM]A
?OnStringNew@@YGGJPAJ]A
?DeleteSemaphoreEx@@YGIIEG]A
?RemoveListOriginal@@YGMPAM]A
?SendMutexEx@@YGNKPAGPAMJ]A
?IsNotPointExA@@YGGK]A
?OnSemaphoreExA@@YGXDED]A
?CancelDataOriginal@@YGPAXPAD]A
?GetPointerExW@@YGPA_NHMMM]A
?PutStringNew@@YGPAMG]A
?FindPathOld@@YGEPADJH_N]A
?CallStringW@@YGPAEDJH]A
?DeleteDataExW@@YGXEIJK]A
?CopyConfigOriginal@@YGFM]A
?ValidateFileExW@@YGDPAI]A
?CrtStateW@@YGGPAJ]A
?PutMonitorEx@@YGPAJEK]A
?InstallFullNameEx@@YGHJ]A
?PutNameNew@@YGHHPAE]A
?AddNameOriginal@@YGGPAF]A

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c83ea60ec156c17a59c84b59cf5f15a6

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 192KB

.data Size: 23KB - Virtual size: 23KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 192KB - Virtual size: 192KB

.data
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB