fad7f4671bd64c7f3a02bddc6ea6a06f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fad7f4671bd64c7f3a02bddc6ea6a06f_JaffaCakes118
Size

95KB
MD5

fad7f4671bd64c7f3a02bddc6ea6a06f
SHA1

954a0a5ae3a6e7578523c89154825fdbc44ebc9a
SHA256

b96289170dba23eaf50092e6f33b84cda0d630a7b48ab0663c8a88db49b1fbf6
SHA512

62604c5669439381de6f269277f57f28e678b3f1e87ec93a3a2ca4d1235970093860933a332ab4882319ee77122824390d36e9667e2d4fe2649bf6c4ecefcd07
SSDEEP

1536:Psh/REyGsVPJEzAUViA3MWOb/O4tLI509ibjrJS8T7zJlZW2wtno:Eh/REyxVRlUVi7bb/Btg09ibjtSQrwto

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad7f4671bd64c7f3a02bddc6ea6a06f_JaffaCakes118

Files

fad7f4671bd64c7f3a02bddc6ea6a06f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

54d66e447dd0ef9d29e03366215ec900

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\FKtUqfVgyh\Ijsuvncbakq\sidAVBzbzwqdL\Zgmgebw.pdb

Imports

comdlg32

ChooseColorW
GetFileTitleW
GetOpenFileNameA
PrintDlgExW
FindTextW
ReplaceTextW

shlwapi

UrlIsA

user32

DrawTextExW
InvalidateRgn
ReplyMessage
ClipCursor
SendInput
SetMenuDefaultItem
OffsetRect
SetUserObjectInformationW
GetScrollRange
CheckMenuItem
GetSystemMetrics
AppendMenuA
SetDlgItemTextW
SetWindowPlacement
ClientToScreen
wvsprintfW
SendMessageTimeoutA
CascadeWindows
keybd_event
EnableWindow
FillRect
GetDlgItemTextW
GetWindowLongA
GetDlgItem
SetWindowRgn
TrackPopupMenu
GrayStringW
GetMessageA
AllowSetForegroundWindow
SetWindowPos
SetParent
DrawIcon
GetKeyboardType
MapVirtualKeyA
GetClassLongA
CharPrevA
LoadIconA
GetMenuStringW
GetKeyboardLayoutList
CharToOemA
DefFrameProcA
EnumThreadWindows
RegisterClassA
RegisterHotKey
SetWindowTextA
GetMenuItemCount
IsCharLowerA
GetDC
GetClientRect
PostMessageA
UnloadKeyboardLayout
IsZoomed
RegisterWindowMessageA
LoadMenuA
BringWindowToTop
GetPropW
PostThreadMessageA
LoadCursorW
CharPrevW
wsprintfW
DestroyCursor
ScrollWindowEx
MapDialogRect
GetUpdateRect
GetSysColor
IsDialogMessageA
DestroyAcceleratorTable
SendMessageW
DefFrameProcW
CreateCaret
DefWindowProcW
GetParent
DrawTextW
InsertMenuW
GetClassLongW
SetTimer
CopyImage
GetNextDlgGroupItem
OemToCharA
SetRect
IsRectEmpty
GetCaretPos
DeferWindowPos
SetDlgItemInt
SetScrollInfo
GetActiveWindow
DispatchMessageA
EnumWindows
EnableMenuItem
AdjustWindowRectEx
DrawEdge
WindowFromPoint
BeginDeferWindowPos
AttachThreadInput
BeginPaint
GetAltTabInfoA
GetFocus
ChildWindowFromPointEx
DestroyMenu
GetScrollPos
GetClassNameW
IsCharAlphaW
GetKeyboardLayoutNameW
GetClassInfoExW
GetIconInfo
SendNotifyMessageW
EndPaint
GetAsyncKeyState
LoadAcceleratorsA
ArrangeIconicWindows
LoadImageW
SystemParametersInfoA
SetFocus
RedrawWindow
GetKeyState
DialogBoxParamA
GetMenuItemID
MapVirtualKeyW
IsWindowEnabled
TranslateAcceleratorA
CreateMenu

msvcrt

_controlfp
__set_app_type
iswctype
__p__fmode
__p__commode
getenv
strspn
_amsg_exit
_initterm
wcsrchr
gmtime
free
bsearch
_ismbblead
isdigit
towlower
wcstombs
strtoul
wcsstr
realloc
atol
clock
_XcptFilter
fgetc
mktime
wcscspn
_exit
wcsncmp
system
_cexit
strchr
__setusermatherr
iswalpha
wcstok
strstr
strpbrk
rand
setvbuf
mbstowcs
strcpy
towupper
isupper
floor
__getmainargs
malloc
putchar
atoi

kernel32

GetTempPathW
SetUnhandledExceptionFilter
lstrcpyA
IsBadWritePtr
GetLocaleInfoW
CopyFileA
InitializeCriticalSection
IsValidLocale
MoveFileA
HeapAlloc
GetCommProperties
GetModuleFileNameA
SetFileAttributesW
LockResource
HeapFree
GetDateFormatA
TerminateThread
SetCurrentDirectoryA
GetModuleHandleW
WaitForMultipleObjects
CreateDirectoryA
GetLocalTime
LocalFree
GetFileAttributesExA
OpenEventW
CompareFileTime
LoadResource
SetErrorMode
HeapReAlloc
FlushViewOfFile
lstrcmpA
ClearCommBreak
ReleaseSemaphore
GetProcessHeap
GetNumberFormatA
CreatePipe
GetFullPathNameW
LoadLibraryExW
FindResourceW
FindNextFileW
FoldStringW
GetFullPathNameA
GlobalLock
GetAtomNameW
GetCommTimeouts
IsValidLanguageGroup
GetCurrentDirectoryW
GetModuleFileNameW
SetCommMask
GetFileInformationByHandle
RemoveDirectoryW
GetSystemDefaultLangID
MoveFileW
EnterCriticalSection
lstrcpynW
GetFileAttributesExW
GetFileType
lstrcmpiA
DisconnectNamedPipe

Exports

Exports

?BinaryRedirectNetDYuyhDBH@@YGKGE[D

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54d66e447dd0ef9d29e03366215ec900

Headers

File Characteristics

PDB Paths

Imports

comdlg32

shlwapi

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 328KB

.rsrc Size: 78KB - Virtual size: 77KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 328KB

.rsrc
Size: 78KB - Virtual size: 77KB

.reloc
Size: 2KB - Virtual size: 1KB