e25dbd139b267dc08eb10c6e5a9e03ae_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e25dbd139b267dc08eb10c6e5a9e03ae_JaffaCakes118
Size

142KB
MD5

e25dbd139b267dc08eb10c6e5a9e03ae
SHA1

daa0dbed95076fd223f02239ef71c4c679d1b923
SHA256

d4821b868eca163f5d645847bbf224003ea3479a4e3f6f3f408d9ac7f5420a69
SHA512

97a636cbd5f0628cd3723afb25feec0c6d09a07577a9126d1b49c63cc63e11e97fd542763512f3c6a8bc041bed648d81c8d5d64294879712bcc6bfafe69e2c77
SSDEEP

3072:3bnfJk5eMXmCQgxHgiTDXbpxWLTVqT6/X2YyQhIP0+pt3ImKSsTjnB:3bRkYCrHg6TfWfVYkmYV8t3cSsf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e25dbd139b267dc08eb10c6e5a9e03ae_JaffaCakes118

Files

e25dbd139b267dc08eb10c6e5a9e03ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

317ab03270e5d3774e0048e844db0e7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\jrDrbmhUVLfxe\krydlTLzm\FbynhxlcCRhah.pdb

Imports

msvcrt

iswxdigit
_controlfp
wcstod
__set_app_type
strcoll
iswalpha
swscanf
__p__fmode
calloc
__p__commode
strrchr
fputs
_amsg_exit
wcstombs
wcspbrk
toupper
strtoul
_initterm
perror
ungetc
swprintf
_ismbblead
_XcptFilter
puts
sprintf
getc
isalnum
isupper
getenv
atol
fseek
putc
rand
_exit
iswctype
wcschr
_cexit
wcscspn
atoi
__setusermatherr
fflush
setlocale
fgets
__getmainargs
iswprint
towlower
fgetc

kernel32

CreateEventA
SearchPathW
GetUserDefaultLangID
GetStdHandle
CallNamedPipeW
FindResourceW
TlsSetValue
CreateFileMappingA
FormatMessageW
GetShortPathNameA
DeleteCriticalSection
UnhandledExceptionFilter
lstrlenW
GetLocaleInfoW
InitializeCriticalSection
DuplicateHandle
GetOverlappedResult
MulDiv
ReleaseSemaphore
GlobalFree
GetCompressedFileSizeW
GetStringTypeExW
EnterCriticalSection
GlobalHandle
GetVersionExA
GetSystemDirectoryW
GlobalAddAtomA
LocalReAlloc
SetSystemTime
SetLocalTime
TlsGetValue
GetFileInformationByHandle
FindNextChangeNotification
OpenEventW
GetSystemTimeAdjustment
SetCommBreak
SetCurrentDirectoryA
GetFileType
GlobalMemoryStatus
CancelWaitableTimer
SetWaitableTimer
SystemTimeToFileTime
LCMapStringA
LocalSize
GetComputerNameW
GetWindowsDirectoryA
FindResourceExA
ClearCommError
LoadLibraryExA
LoadLibraryA
HeapLock
CreateFileW
GetNumberFormatA
SetMailslotInfo
CompareStringA

comctl32

ImageList_Write
DestroyPropertySheetPage
ImageList_GetImageCount
InitCommonControlsEx
ImageList_LoadImageW
CreateToolbarEx

user32

UpdateWindow
IsZoomed
DrawAnimatedRects
keybd_event
DestroyAcceleratorTable
OpenIcon
wsprintfW
GetScrollInfo
GetDCEx
ChildWindowFromPointEx
EnableScrollBar
SetParent
GetWindowTextW
SetCaretPos
PostMessageA
OemToCharA
SetMenuDefaultItem
TranslateAcceleratorW
LoadBitmapA
ShowCursor
GetSubMenu
SetSysColors
RegisterHotKey
GetMenuStringA
CharToOemA
RegisterClassExA
GetDlgItemTextA
DrawStateA
InternalGetWindowText
ScreenToClient
CharPrevW
CharUpperA
SetWindowRgn
SendMessageW
SendMessageA
DrawEdge
GetAsyncKeyState
SystemParametersInfoW
PostThreadMessageW
GetClipCursor
GetClassInfoA
SendDlgItemMessageA
DestroyCursor
GetKeyboardLayoutNameW
SetMenuItemBitmaps
GetClassInfoW
MessageBoxW
GetClassNameW
IsCharAlphaNumericW
MoveWindow
DefDlgProcA
LoadCursorA
MessageBoxExW
CallWindowProcW
DialogBoxIndirectParamA
PostMessageW
GetUpdateRgn
SendNotifyMessageW
HideCaret
SendInput
DispatchMessageW
MapWindowPoints
SetUserObjectInformationW
TranslateMessage
DrawTextA
wsprintfA
GetScrollRange
GetMenuItemInfoW
PeekMessageA
DragObject
GetKeyboardLayout
ScrollWindow
GetCursorPos
GetWindowPlacement
GetMessagePos
DispatchMessageA
OpenDesktopW
GetDC
ShowCaret
IntersectRect
MapDialogRect
EnableWindow
GetDoubleClickTime
GrayStringW
BringWindowToTop
InvalidateRect
GetShellWindow
GetUserObjectInformationW
DefDlgProcW
CheckDlgButton
GetDlgItemInt
FillRect
MonitorFromRect
CreateDialogParamA
SetFocus
DestroyIcon
WaitMessage
CloseDesktop
GetMessageA
GetMenuState
UnloadKeyboardLayout
AdjustWindowRectEx
ShowWindowAsync
ReplyMessage
HiliteMenuItem
ModifyMenuW
GetPropW
DefWindowProcW
SetWindowLongA
GetKeyState
GetMessageExtraInfo
InflateRect
SendMessageTimeoutA
ShowOwnedPopups
GetIconInfo
GetNextDlgGroupItem
CheckRadioButton

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erts
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 1024B - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.info
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

317ab03270e5d3774e0048e844db0e7f

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

comctl32

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.init Size: 6KB - Virtual size: 5KB

.erts Size: 512B - Virtual size: 86B

.pdata Size: 512B - Virtual size: 32B

.vdata Size: 512B - Virtual size: 32B

.wall Size: 1024B - Virtual size: 126KB

.info Size: 1024B - Virtual size: 640B

.data Size: 3KB - Virtual size: 2KB

.udata Size: 30KB - Virtual size: 30KB

.rsrc Size: 76KB - Virtual size: 76KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 19KB

.init
Size: 6KB - Virtual size: 5KB

.erts
Size: 512B - Virtual size: 86B

.pdata
Size: 512B - Virtual size: 32B

.vdata
Size: 512B - Virtual size: 32B

.wall
Size: 1024B - Virtual size: 126KB

.info
Size: 1024B - Virtual size: 640B

.data
Size: 3KB - Virtual size: 2KB

.udata
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 76KB - Virtual size: 76KB

.reloc
Size: 1KB - Virtual size: 1KB