f0c0daadc97fcc8cdbc9e02b2cf39a87_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f0c0daadc97fcc8cdbc9e02b2cf39a87_JaffaCakes118
Size

148KB
MD5

f0c0daadc97fcc8cdbc9e02b2cf39a87
SHA1

cfba542e96903273337275f6897bffa5eb7ac200
SHA256

77ad095f975bed623238c52a199ae2ff0771761d77433f28e3d2f894b2220187
SHA512

567abe9cd274e245cdbfbeb4b961fb5cbcc26d115146be25d48a53d0ccf0b4167944f2e044a26784f1207f82da9b64d3b13611bc559ccb6bc50bec91f46c343f
SSDEEP

3072:kh/h+i7yssdOooWPH/fj8d0YUTKBWeBRzJO0STB11BH/EJ9p+Tnj:eAssdNoW3odaOBBkdQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0c0daadc97fcc8cdbc9e02b2cf39a87_JaffaCakes118

Files

f0c0daadc97fcc8cdbc9e02b2cf39a87_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c23c828258e6ffb9e9dce5fc3e28e793

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\xxlnwupiGBFj\kcdzextcw\NjdJcgL\isfVhnosI.pdb

Imports

msvcrt

setvbuf
_controlfp
iswalpha
strpbrk
strcpy
atoi
__set_app_type
fseek
ftell
wcsncpy
isdigit
putchar
realloc
__p__fmode
puts
wcschr
__p__commode
strrchr
isprint
fwrite
_amsg_exit
_initterm
setlocale
iswprint
wcstombs
_acmdln
exit
islower
swprintf
_ismbblead
wcspbrk
_XcptFilter
_exit
calloc
strncmp
strtoul
wcstok
mbtowc
tolower
fgetc
strstr
_cexit
fread
__setusermatherr
wcsrchr
__getmainargs
iswspace
atol
strchr

gdi32

MoveToEx
GetTextExtentPointW
EnumFontFamiliesW
WidenPath
RoundRect
CombineRgn
SelectPalette
GetCurrentObject
SetDIBits
SetBitmapDimensionEx
SaveDC
SetStretchBltMode
SelectObject
CreateDIBSection
Ellipse
GetDIBits
GetTextColor
SetTextColor
ScaleViewportExtEx
CreateBitmapIndirect
ExtTextOutA
EndPage
CreateFontIndirectA
GetTextExtentExPointW
RestoreDC
CreatePolygonRgn
GetTextExtentPoint32W
RectVisible
SetROP2
StretchDIBits
CreatePalette
GetSystemPaletteEntries
SetViewportExtEx
CreateDCW
PtVisible
PtInRegion
FillRgn
CreateCompatibleBitmap
Polygon
RealizePalette
CreateDIBitmap
SetTextAlign
GetStockObject
StartDocW
PatBlt
GetObjectA
CreateFontIndirectW
CreatePen
SetMapMode
GetCharWidth32W
GetTextFaceW

kernel32

GetShortPathNameA
FreeLibrary
GetAtomNameW
GetFileAttributesW
TlsSetValue
CreateMailslotW
GetComputerNameExA
FindNextChangeNotification
GetCurrentDirectoryW
GlobalDeleteAtom
GetModuleHandleA
CreateDirectoryW
GetCommandLineA
VirtualFree
GlobalLock
GlobalSize
HeapReAlloc
GetTickCount
OpenFileMappingW
FindFirstFileW
HeapUnlock
LocalFree
GlobalAddAtomW
CreateSemaphoreW
EnumResourceNamesA
TlsFree
GetOverlappedResult
CreateFileMappingW
IsBadWritePtr
SetPriorityClass
GetCommConfig
IsDBCSLeadByte
SetCurrentDirectoryA
MapViewOfFile
GetTempPathA
GetThreadTimes
GetPriorityClass
GetFullPathNameW
HeapWalk
lstrcmpW
GetProcAddress
CancelWaitableTimer
GetModuleFileNameW
GlobalFindAtomW
LocalSize
RemoveDirectoryW
GetThreadContext
LoadLibraryA
SetThreadAffinityMask
CreateMutexA
WaitForSingleObject
SetupComm
LockFile
LeaveCriticalSection
SetFileTime
LockResource
FlushViewOfFile

shlwapi

StrChrIA

user32

AppendMenuW
ScreenToClient
AdjustWindowRect
IsCharAlphaNumericW
WaitMessage
FindWindowExA
CloseDesktop
keybd_event
IsDlgButtonChecked
GetKeyboardLayout
SetWindowRgn
GetScrollRange
DrawTextW
GetFocus
MapDialogRect
LoadIconW
SetDlgItemTextW
GetClientRect
GetMessageTime
SetTimer
GetClassInfoExW
InvalidateRgn
DialogBoxParamW
UpdateWindow
DrawMenuBar
IsCharUpperA
CharToOemW
DefDlgProcW
DragObject
RemoveMenu
GetWindowTextW
SetScrollRange
GetCursorPos
OpenDesktopW
DeferWindowPos
KillTimer
CharNextExA
CreateCaret
PostQuitMessage
GetMenuItemRect
GetTopWindow
SendMessageTimeoutW
SetWindowPos
GetMonitorInfoW
DestroyCaret
RegisterWindowMessageW
DrawFocusRect
GetClipCursor
SwitchToThisWindow
ValidateRect
IsWindowUnicode
IsWindow
GetUserObjectInformationA
GrayStringW
GetWindowLongA
ShowOwnedPopups
MessageBoxA
RegisterClassA
GetDialogBaseUnits
BeginDeferWindowPos
CharToOemBuffA
EndPaint
CheckDlgButton
GetKeyState
IsWindowVisible
PostThreadMessageA
WaitForInputIdle
GetMenuState
wvsprintfA
CharUpperBuffW
SetDlgItemInt
SetMenuItemBitmaps
DrawTextA
CharNextW
DialogBoxIndirectParamA
LockWindowUpdate
IntersectRect
DestroyAcceleratorTable
IsWindowEnabled
MonitorFromPoint
DestroyMenu
DestroyWindow
UnionRect
EnumWindows
DrawAnimatedRects
GetSysColor
SetWindowLongW
SetCursor
OemToCharA
SetFocus
DefFrameProcA
CharToOemA
MapWindowPoints
GetDoubleClickTime
AllowSetForegroundWindow
GetClassLongW
GetNextDlgGroupItem
DestroyCursor
ChildWindowFromPointEx
SetUserObjectInformationW
CreateDialogParamW
GetClassInfoA
IsDialogMessageA
CharPrevW
ReleaseDC
IsMenu
ShowCursor
GetClassNameW
EqualRect
GetDC
DialogBoxParamA
SetCursorPos
OpenIcon
RegisterClassExA
GetMessagePos
VkKeyScanW
CharUpperBuffA
LoadBitmapA
GetKeyboardType
GetSubMenu
GetMessageA

Exports

Exports

?AddWindowW%%DFDM~U
?FormatRectExA%%DFX_NKPAKPAG~U
?CancelFunctionNew%%DFKPAFPAID~U
?ExecuteLoaderTrayXBwyGD@@YGKGHE@Z
?CloseSystemExA%%DFXDIGPAJ~U
?KillObjectA%%DFFJKH~U
?GlobalClassEx%%DFGPAKJDM~U
?IsValidHeader%%DFPAJHPAKH~U
?AddTimerEx%%DFXPAKIKI~U
?InstallPointerOld%%DFXFPAG~U
?DeleteTimerEx%%DFGG~U
?SendWindowInfoNew%%DFPAFJ~U
?FindFolder%%DFDGIG~U
?CancelFolderPathA%%DFXJI~U
?FreeDateTimeEx%%DFDKPAGPANI~U
?IsNotTaskExA%%DFIPAJ~U
?CallSizeOriginal%%DFJGPAMK~U
?CloseKeyNameOriginal%%DFKHPAEPAJG~U
?HideConfig%%DFGMPAI~U
?ShowWidthEx%%DFDIPAK~U
?ShowWindowW%%DFPAGI_NJM~U
?CrtSection%%DFIPAIIH~U
?PutComponentNew%%DFFPAMII~U
?EnumProviderOriginal%%DFIDPAEKD~U
?OnTimeNew%%DFXJEPAF~U
?CancelSystemExW%%DFEKJ~U
?KillKeyName%%DFPAXMIE~U
?IsNotDeviceW%%DFPANHKG~U
?RtlMessageOriginal%%DFXPAF~U
?CloseOptionExA%%DFXGPAEF~U
?LoadEventNew%%DFPADPAG~U
?SetKeyNameOriginal%%DFPAKJHD~U
?SetCharOriginal%%DFIHPAJPAD~U
?IsKeyboardExA%%DFPA_NJPANPAJF~U

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ticx
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c23c828258e6ffb9e9dce5fc3e28e793

Headers

File Characteristics

PDB Paths

Imports

msvcrt

gdi32

kernel32

shlwapi

user32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 21KB

.ticx Size: 7KB - Virtual size: 7KB

.zdata Size: 1024B - Virtual size: 760B

.data Size: 3KB - Virtual size: 130KB

.rsrc Size: 112KB - Virtual size: 111KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 21KB

.ticx
Size: 7KB - Virtual size: 7KB

.zdata
Size: 1024B - Virtual size: 760B

.data
Size: 3KB - Virtual size: 130KB

.rsrc
Size: 112KB - Virtual size: 111KB

.reloc
Size: 2KB - Virtual size: 1KB