e064993b842b6c4effe1340ffb187709_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e064993b842b6c4effe1340ffb187709_JaffaCakes118
Size

76KB
MD5

e064993b842b6c4effe1340ffb187709
SHA1

7d49174a4135868471435fc57d35d09c56103700
SHA256

163bff241f53454e2ffe7b06bc1b50609002b2a77c7a02ec9c907cb5ff62bd41
SHA512

86dea13bbb70e33205a5c485d283492f848db6f149be0fce64fd30e2179010958095d9741fb68a1173b4140d7dcdc0de665b94e6aed1adfeeed580c19ef7a060
SSDEEP

1536:kQ7GvBkvx8IgDF7YGO/OIHMo/m7nOXyCcjm:9GvmZ8IgJcGqHMo/+Oxci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e064993b842b6c4effe1340ffb187709_JaffaCakes118

Files

e064993b842b6c4effe1340ffb187709_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8a7171f13af58233d70066843f5698bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\IsjdXichvjnjN\iLEpZkvfFou\aUbQyPsdt\ltlfxjwXxsE.pdb

Imports

user32

InsertMenuA
RegisterClassA
CharNextExA
GetMessageExtraInfo
GetMessageTime
CharNextW
GetDCEx
GetUserObjectInformationA
IsIconic
SetDlgItemInt
ScrollWindowEx
SendMessageTimeoutA
GetSysColor
IsRectEmpty
CreateWindowExA
SetWindowLongW
OffsetRect
BeginDeferWindowPos
CharLowerA
GetLastActivePopup
SetRect
TileWindows
TranslateAcceleratorA
SystemParametersInfoW
GetMenuState
SystemParametersInfoA
DestroyCaret
LoadMenuA
DrawTextW
IsCharUpperA
LockWindowUpdate
IsDialogMessageA
EnableWindow
ShowWindowAsync
CharUpperA
LoadStringW
TranslateAcceleratorW
PostMessageA
SetMenuDefaultItem
GetClientRect
MessageBoxExW
SendMessageA
InvertRect
CallWindowProcW
CopyRect
wvsprintfA
OpenInputDesktop
SetMenuItemBitmaps
DrawTextA
GetAsyncKeyState
CharToOemW
CreateIconFromResource
InsertMenuW
GetKeyboardLayoutList
SetWindowLongA
TabbedTextOutW
SetScrollInfo
DeferWindowPos
HiliteMenuItem
SetCursor
ExitWindowsEx
SetFocus
GetWindowTextW
CloseDesktop
IsCharAlphaNumericW
CheckRadioButton
IsWindowEnabled
GetSubMenu
ShowWindow
GetNextDlgGroupItem
mouse_event
GetSysColorBrush
FillRect
EndDialog
DefWindowProcA
LoadCursorA
RedrawWindow
CharPrevW
CreateCaret
PostMessageW
EnumWindows
GetMenuStringA
MapDialogRect
CheckMenuRadioItem
SendDlgItemMessageA
RegisterClassExW
GetClassInfoExW
IsWindowUnicode
MessageBoxA
OemToCharBuffA
CopyAcceleratorTableW
GetClassNameW
ShowScrollBar
CheckMenuItem
EnumChildWindows
SetWindowPlacement
GetDlgItemTextW
InsertMenuItemW
SetRectEmpty
OemToCharA
SendNotifyMessageW
GrayStringW
GetScrollRange
LoadMenuW
RegisterClassW
CreateAcceleratorTableW
ReplyMessage
SetCaretPos
GetClassLongW
CallWindowProcA
IsMenu
BeginPaint
GetDlgItem
FrameRect
SendMessageTimeoutW
DrawTextExW
CreateDialogParamW
CreateDialogParamA
GetFocus
CharNextA
ShowCursor
EnableMenuItem

kernel32

LocalAlloc
GetThreadPriority
DuplicateHandle
VerSetConditionMask
lstrcpyA
FlushViewOfFile
GetSystemTimeAsFileTime
ResumeThread
SleepEx
SetCommBreak
ConnectNamedPipe
LockFile
GlobalFree
SizeofResource
EnumResourceLanguagesA
GetDateFormatW
GlobalAddAtomW
IsValidLocale
ConvertDefaultLocale
GetCompressedFileSizeW
FreeLibrary
DisconnectNamedPipe
GetProcAddress
RaiseException
SetFilePointer
GetTempPathA
GetAtomNameW
OpenFileMappingW
CreateDirectoryW
SetSystemTime
SetThreadLocale
GetFileAttributesA
GetModuleHandleW
GetLastError
SetThreadAffinityMask
GetLocaleInfoW
GetBinaryTypeA
GetThreadTimes
GetLongPathNameW
lstrlenW
GetShortPathNameW
HeapWalk
WaitForSingleObjectEx
IsBadWritePtr
FindResourceExA
GetTempFileNameA
GetFileAttributesExA
CloseHandle
GetExitCodeThread
QueryPerformanceCounter
lstrcmpiA
ClearCommBreak
GlobalGetAtomNameW
CreateWaitableTimerA
LocalFree

msvcrt

srand
gmtime
wcstol
wcscoll
gets
vswprintf
_controlfp
towlower
mbtowc
putc
fgets
__set_app_type
malloc
iswctype
__p__fmode
__p__commode
memset
wcslen
wcsrchr
isxdigit
toupper
_amsg_exit
_initterm
_ismbblead
isalpha
mktime
realloc
_XcptFilter
puts
strtol
iswalpha
strpbrk
swscanf
strtok
localtime
system
_exit
wcstombs
_cexit
atol
fputs
__setusermatherr
iswdigit
wcscpy
strcoll
strcspn
rand
free
__getmainargs
wcscspn

shlwapi

PathIsUNCA

Exports

Exports

?ForwardControlItem@@YGK_KK:O

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erts
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.info
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a7171f13af58233d70066843f5698bb

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

msvcrt

shlwapi

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 21KB

.init Size: 6KB - Virtual size: 5KB

.erts Size: 512B - Virtual size: 88B

.wall Size: 512B - Virtual size: 36KB

.info Size: 512B - Virtual size: 192B

.data Size: 3KB - Virtual size: 2KB

.udata Size: 10KB - Virtual size: 9KB

.tls Size: 512B - Virtual size: 512B

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 21KB

.init
Size: 6KB - Virtual size: 5KB

.erts
Size: 512B - Virtual size: 88B

.wall
Size: 512B - Virtual size: 36KB

.info
Size: 512B - Virtual size: 192B

.data
Size: 3KB - Virtual size: 2KB

.udata
Size: 10KB - Virtual size: 9KB

.tls
Size: 512B - Virtual size: 512B

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 2KB - Virtual size: 1KB