f61887a8ca30512288d587696133f34c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f61887a8ca30512288d587696133f34c_JaffaCakes118
Size

42KB
MD5

f61887a8ca30512288d587696133f34c
SHA1

f4136220b4db797f692a69f50e574250f722d552
SHA256

9be413e2e70f648bdbcd9a9669d845772e4f210aae32e4421e47d2b30ea331bd
SHA512

9f8a44ed1e5025f2a026a9538dbc464c0c41217eb62b7cf9f776110e88f8e9f66e7b588af07ebd531a92efd444613f7c89c7e53a2273df98e304e261dfdea509
SSDEEP

768:O2eAk+Boqi5dzKvUVmdtN2RBovhmTuDtJrRtIV+9XwLO8i/iN4fJ:bBhi5dzK3ZhmyDfVwS8+vR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f61887a8ca30512288d587696133f34c_JaffaCakes118

Files

f61887a8ca30512288d587696133f34c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7650d6e0ffc9d51a36857db056f18a75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\jpImDUZj\eqmfivnvYEl\vulevEwrevrnl.pdb

Imports

msvcrt

wcstok
qsort
isxdigit
wcscoll
free
_controlfp
fread
fflush
system
fgetc
iswprint
time
__set_app_type
__p__fmode
bsearch
mbtowc
atol
strtok
wcsncmp
__p__commode
_amsg_exit
puts
mbstowcs
fwrite
wcsrchr
mktime
fprintf
wcsncpy
iswdigit
_initterm
strpbrk
fseek
_ismbblead
isalnum
_XcptFilter
gmtime
wcscpy
towupper
_exit
strcpy
strcspn
strncpy
strerror
perror
_cexit
__setusermatherr
__getmainargs

user32

wsprintfW
CreateDialogParamW
GetClassInfoExW
DrawEdge
CharNextA
SetWindowLongW
ArrangeIconicWindows
PostThreadMessageW
OpenInputDesktop
FillRect
DispatchMessageW
FindWindowW
GetPropW
ShowOwnedPopups
DialogBoxIndirectParamA
IsMenu
GetKeyboardType
GetMenuItemInfoW
MapVirtualKeyA
CallWindowProcW
CharLowerW
CreateWindowExA
BringWindowToTop
GetMenu
WaitMessage
IsCharAlphaW
OemToCharBuffA
ScrollWindowEx
GetDlgItem
DefWindowProcA
SendMessageW
IsDlgButtonChecked
DrawStateA
FrameRect
LoadImageA
GetNextDlgGroupItem
CheckRadioButton
GetWindowTextW
SendInput
CreateMenu
InSendMessageEx
EqualRect
IsCharAlphaA
GetDlgItemTextA
DrawStateW
MessageBoxExA
GetClassInfoW
ClipCursor
GetFocus
GetClassNameW
CharUpperBuffA
AppendMenuW
CreateDialogIndirectParamW
PostMessageW
OemToCharA
DestroyWindow
SetCursorPos
GetLastActivePopup
GetActiveWindow
MessageBoxA
ModifyMenuW
GetMenuCheckMarkDimensions
PeekMessageA
VkKeyScanW
GetClientRect
DestroyCaret
DeferWindowPos
DestroyAcceleratorTable
EnableWindow
SetFocus
GetTopWindow
GetMessageW
EnableScrollBar
AdjustWindowRect
InSendMessage
CharNextExA
HiliteMenuItem
GetMenuItemCount
CharUpperBuffW
GetScrollInfo
CharToOemW
CreateIconIndirect
SetScrollPos
SetScrollRange
IsWindowVisible
GetWindowPlacement
TrackPopupMenuEx
IsDialogMessageW
LoadImageW
ToUnicodeEx
LoadIconA
EnableMenuItem
GetWindowLongA
ClientToScreen
RegisterHotKey
SendDlgItemMessageA
OffsetRect
BeginPaint
CreateCursor
MonitorFromRect
DrawAnimatedRects
GetUpdateRect
wsprintfA
SendMessageA
GetParent
SetMenuItemInfoW
DialogBoxIndirectParamW
AttachThreadInput
PostQuitMessage
RegisterClassW
CharPrevA
GetMessageExtraInfo
GetSysColor
ValidateRect
GetMenuItemID
IsZoomed
DestroyCursor
SetRectEmpty
GetDCEx
DrawIconEx
LoadAcceleratorsW
GetDialogBaseUnits
InternalGetWindowText
SetWindowTextW

comdlg32

GetSaveFileNameA
PrintDlgExW
GetSaveFileNameW
PageSetupDlgW

kernel32

GetDateFormatA
GetCurrentDirectoryW
GlobalReAlloc
DeleteCriticalSection
GetCurrentThread
CreateWaitableTimerA
lstrlenW
GetModuleFileNameA
GetSystemTimeAsFileTime
CreateDirectoryW
GetSystemDirectoryW
SetLastError
ReleaseMutex
GetVersionExA
GetComputerNameExW
WaitForMultipleObjectsEx
SetErrorMode
GlobalAddAtomW
SetEvent
EnumResourceTypesA
GetFileTime
VirtualAlloc
GetTempPathW
GetCurrentThreadId
TlsFree
SearchPathW
UnlockFile
GetBinaryTypeA
SetSystemTimeAdjustment
EnumSystemLocalesA
SetFileTime
OpenFile
IsBadReadPtr
SetFileAttributesA
lstrcpynW
GetSystemDirectoryA
GetTempPathA
VirtualFree
EnterCriticalSection
CancelWaitableTimer
DisconnectNamedPipe
GetSystemDefaultLangID
SetCurrentDirectoryA
QueryPerformanceCounter
CreateSemaphoreA
GetSystemWindowsDirectoryW
SetThreadPriority
GetModuleHandleA
CompareStringW
IsValidLanguageGroup
EscapeCommFunction
MoveFileW
MoveFileA
CreateWaitableTimerW
GlobalAlloc
SetThreadContext
lstrcmpA
WaitForMultipleObjects
GetTickCount

Exports

Exports

?RegenerateMainValues@@YGKPBDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.e_tab
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.redit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_tab
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.site
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7650d6e0ffc9d51a36857db056f18a75

Headers

File Characteristics

PDB Paths

Imports

msvcrt

user32

comdlg32

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.e_tab Size: 512B - Virtual size: 125B

.redit Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.i_tab Size: 6KB - Virtual size: 5KB

.site Size: 512B - Virtual size: 304B

.wdata Size: 512B - Virtual size: 192B

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 22KB - Virtual size: 22KB

.e_tab
Size: 512B - Virtual size: 125B

.redit
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.i_tab
Size: 6KB - Virtual size: 5KB

.site
Size: 512B - Virtual size: 304B

.wdata
Size: 512B - Virtual size: 192B

.rsrc
Size: 8KB - Virtual size: 7KB