ef2ad1b9e7816fa38db96275a0d1103a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef2ad1b9e7816fa38db96275a0d1103a_JaffaCakes118
Size

145KB
MD5

ef2ad1b9e7816fa38db96275a0d1103a
SHA1

a7273bc76292232229ca4876e3a58832a106b996
SHA256

a11289f916fec38b1d2e17627434dd7b6966ae6accb9e0a1399265257461c5d4
SHA512

8261c275be41c95462ef9d6ed3d854123219310d3a47a0456c30d2dac372c3131531428b00422a334e8b02b0128cf26d7715bdc14b6bcb40e446083d71741f4d
SSDEEP

3072:E5xWo2lZLkPxRuPvEyAkOXmkurkjsjXgNTZWukzXomwvliQXuKsS/3N:a0o2roIPsRr9vZkzpwvwQXuGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef2ad1b9e7816fa38db96275a0d1103a_JaffaCakes118

Files

ef2ad1b9e7816fa38db96275a0d1103a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9291812dd9139e0ae7b8601e1e3f46b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

S:\qtyDpVc\ZVOggdjk\lycfBrQnu.pdb

Imports

user32

GetMessageA
IsIconic
CreatePopupMenu
WindowFromPoint
UpdateWindow
DialogBoxIndirectParamA
IsDialogMessageA
GetUserObjectInformationA
CharToOemA
GetClassLongW
GetMenuItemRect
GetAsyncKeyState
PostThreadMessageW
InternalGetWindowText
MapDialogRect
OpenIcon
GetWindowDC
CreateCursor
CreateCaret
SetDlgItemTextA
DrawFocusRect
InSendMessage
SetClassLongW
GetClassInfoA
ExitWindowsEx
CopyImage
ScrollWindow
DeleteMenu
MessageBoxW
GetKeyboardLayoutList
SetWindowTextW
DrawStateW
GetClassInfoExW
MapVirtualKeyExW
CharLowerBuffW
SetCursor
IsCharLowerA
GetClipCursor
VkKeyScanW
CreateDialogParamA
SetDlgItemInt
DestroyMenu
RegisterClassA
IsCharAlphaW
DefDlgProcA
GetFocus
CharPrevW
RegisterClassExA
MonitorFromPoint
BringWindowToTop
ScreenToClient
ShowOwnedPopups
GetScrollInfo
SetWindowLongW
SystemParametersInfoW
GetNextDlgTabItem
SendNotifyMessageW
OpenInputDesktop
ShowCursor
GetWindowRect
ReplyMessage
wsprintfW
GetKeyState
GetWindowLongW
GetWindow
IsWindow
CreateIconFromResource
GetPropW
CharLowerW
DrawIcon
GetTopWindow
wsprintfA
GetUserObjectInformationW
SetLastErrorEx
MonitorFromRect
LoadIconA
CreateDialogParamW
RegisterWindowMessageA
LookupIconIdFromDirectory
ChangeMenuW
AppendMenuA
OemToCharBuffA
DeferWindowPos
CharToOemW
DestroyAcceleratorTable
SetWindowTextA
GetKeyboardLayoutNameW
wvsprintfA
TranslateAcceleratorA
GetMenuStringW
GetShellWindow
OpenDesktopW
SetWindowRgn
SendMessageA
InsertMenuW
GetNextDlgGroupItem
GetMenuItemCount
GetDlgItemInt
SetPropW
ShowCaret
DialogBoxParamW
SetUserObjectInformationW
CharNextW
SetParent
GetMenu
SendMessageW
CharNextA
IntersectRect
SystemParametersInfoA
GetDC
IsDialogMessageW
SetWindowPos
EnableMenuItem
BeginPaint
LoadAcceleratorsA
SetDlgItemTextW
GetMessageW

shlwapi

StrToIntW

kernel32

lstrcpynA
HeapSize
FlushViewOfFile
WaitForMultipleObjects
CreateSemaphoreA
LoadLibraryW
ConnectNamedPipe
SetThreadAffinityMask
GetExitCodeThread
GetModuleFileNameA
WaitForSingleObject
OpenFile
DuplicateHandle
SetPriorityClass
GetModuleHandleW
GetModuleFileNameW
GetStartupInfoA
GlobalAlloc
GetComputerNameA
lstrcatW
FindFirstFileA
HeapCreate
CancelIo
FindFirstFileW
LockFile
CompareFileTime
SleepEx
TlsFree
InitializeCriticalSection
SetFileTime
ConvertDefaultLocale
SetEndOfFile
GetCurrentDirectoryW
GlobalFree
GetFileAttributesA
CallNamedPipeW
LoadLibraryA
GetLocaleInfoA
GlobalAddAtomW
CreateThread
CreateDirectoryW
GlobalLock
CompareStringW
FindFirstChangeNotificationW
lstrcpyA
EnumResourceNamesA
SetLastError
GetBinaryTypeW
GetFileAttributesExW
CreateEventW
lstrcatA
CreateFileMappingW
FormatMessageA
GetSystemTimeAdjustment
ClearCommBreak

msvcrt

isspace
_controlfp
__set_app_type
perror
strtok
isprint
__p__fmode
iswxdigit
__p__commode
wcsstr
_amsg_exit
getenv
strstr
wcscspn
setlocale
_initterm
islower
_ismbblead
wcsncpy
wcscat
setvbuf
towlower
_XcptFilter
fclose
iswprint
_exit
fgetc
tolower
strspn
mbstowcs
qsort
wcstombs
gets
_cexit
strerror
system
wcsncmp
time
srand
__setusermatherr
puts
clock
swscanf
__getmainargs
free
sscanf
getc

comctl32

ImageList_AddMasked
CreatePropertySheetPageW
CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_Read
CreateToolbarEx

Exports

Exports

?Extract_Options@@YGK_KHE:O

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.feed
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9291812dd9139e0ae7b8601e1e3f46b0

Headers

File Characteristics

PDB Paths

Imports

user32

shlwapi

kernel32

msvcrt

comctl32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.idata Size: 6KB - Virtual size: 5KB

.edata Size: 512B - Virtual size: 86B

.feed Size: 1024B - Virtual size: 640B

.data Size: 2KB - Virtual size: 127KB

.rsrc Size: 113KB - Virtual size: 112KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.idata
Size: 6KB - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 86B

.feed
Size: 1024B - Virtual size: 640B

.data
Size: 2KB - Virtual size: 127KB

.rsrc
Size: 113KB - Virtual size: 112KB

.reloc
Size: 1KB - Virtual size: 1KB