fe31c9f73aea5e6849e23fe3020af764_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe31c9f73aea5e6849e23fe3020af764_JaffaCakes118
Size

300KB
MD5

fe31c9f73aea5e6849e23fe3020af764
SHA1

ca130a354570a7fd71c4316fdc31ba673f8498a8
SHA256

863ace19877a0f6c3926accacade6f16cac2fc5f881e02c03b9d39a66264bf83
SHA512

23429437d7e5bd6245e19459652e1af78a09e8cb7b6771d549d6ea72f632594160936e37d148534ee27e1daa1150b91efa8ce080adae357319a0b038c1b497ab
SSDEEP

6144:GYNkLjf9aXz0s0qaNoM2mGyLfz5MsMrEWj8nAj0p3WQHxrLuaqPA:JgjeUoM5GyLfCrE88nN3Wira

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe31c9f73aea5e6849e23fe3020af764_JaffaCakes118

Files

fe31c9f73aea5e6849e23fe3020af764_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3bb413d78142518e9b77cd9c0f2df0be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\dGpvthasfk\yrvugilp\cjOqmnYcpHyovl\vipkwvrpebBk\jkqzzzuwmixt.pdb

Imports

shlwapi

StrToIntW

msvcrt

_controlfp
__set_app_type
fgets
exit
__p__fmode
fclose
wcstol
iswalpha
ungetc
fgetc
__p__commode
strncmp
getc
fflush
wcscmp
_amsg_exit
fputs
qsort
fputc
isspace
towlower
puts
floor
strncpy
_initterm
strcoll
free
isxdigit
_ismbblead
fread
time
iswxdigit
_XcptFilter
_exit
isprint
_cexit
toupper
swscanf
strchr
__setusermatherr
__getmainargs
memset
localtime
calloc
ftell
strpbrk
clearerr
realloc

kernel32

HeapAlloc
LocalLock
GetComputerNameA
SleepEx
SetFileAttributesW
GlobalLock
DeleteFileW
GlobalGetAtomNameW
DisconnectNamedPipe
HeapLock
VirtualAlloc
UnhandledExceptionFilter
OpenFileMappingA
GetProcessHeap
CreateThread
FlushViewOfFile
CreateSemaphoreW
RemoveDirectoryA
ReadFile
ReleaseSemaphore
GetTickCount
WaitForSingleObject
GetThreadLocale
GlobalFree
FindResourceA
GetTimeZoneInformation
TlsFree
OpenEventA
AreFileApisANSI
UnmapViewOfFile
GetModuleHandleA
SetErrorMode
HeapFree
SetCommBreak
ClearCommBreak
WinExec
SetupComm
GlobalDeleteAtom
lstrcpynW
CompareStringA
GetCurrentThreadId
LocalAlloc
HeapWalk
FlushFileBuffers
GetTimeFormatA
CreateDirectoryW
SetFileTime
lstrlenA
CancelIo
TlsSetValue
FindResourceExA
WaitForMultipleObjects
CancelWaitableTimer
GetProcAddress
GetUserDefaultLangID
HeapCreate
TlsGetValue

user32

GetDlgItemTextA
DialogBoxParamW
GetParent
ScreenToClient
GetKeyNameTextW
CreateCursor
LookupIconIdFromDirectory
RegisterClassExA
EnableWindow
CreateDialogParamA
InSendMessage
ShowWindowAsync
GetCaretBlinkTime
GetSysColorBrush
DeferWindowPos
GetMenuStringW
ClientToScreen
IsCharUpperA
DeleteMenu
DestroyIcon
LoadCursorA
SetWindowTextW
OpenInputDesktop
ClipCursor
TabbedTextOutW
DrawMenuBar
EnumChildWindows
EndPaint
CharPrevW
IsChild
GetScrollInfo
SetMenu
CheckMenuItem
CharNextW
SetTimer
SetMenuItemInfoW
AllowSetForegroundWindow
GetNextDlgGroupItem
GetSystemMenu
InsertMenuA
DrawFrameControl
GetIconInfo
IsWindowEnabled
EndDialog
SendDlgItemMessageA
SetWindowPos
GetClassInfoExW
GetClassInfoExA
MessageBoxA
BringWindowToTop
GetWindowPlacement
GetPropW
SetRect
SetWindowRgn
InSendMessageEx
GetKeyboardLayoutList
TrackPopupMenuEx
DrawEdge
SetDlgItemInt
RegisterHotKey
FindWindowW
SendDlgItemMessageW
SendMessageTimeoutW
SetDlgItemTextW
TrackPopupMenu
DispatchMessageW
GetMonitorInfoW
InvalidateRect
HideCaret
ShowCaret
ShowWindow
SetLastErrorEx
InsertMenuItemW
GetFocus
CreateWindowExA
GetMessageTime
SetMenuItemBitmaps
GetKeyState
CharUpperBuffW
ArrangeIconicWindows
CheckDlgButton
GetDlgItem
InvalidateRgn
GetMessageExtraInfo
IsCharLowerA
ExitWindowsEx
LoadAcceleratorsA
AdjustWindowRectEx
RegisterClassA
GetUserObjectInformationW
UnionRect
GetWindowModuleFileNameW
GetGUIThreadInfo
GetActiveWindow
keybd_event
ShowOwnedPopups
RegisterWindowMessageW
ValidateRect
GetMenu
OemToCharA
DrawTextExW
GetWindowTextW
MessageBoxW
SendMessageW
CreateDialogParamW
MapDialogRect
VkKeyScanW
DefWindowProcA
RegisterWindowMessageA
WaitForInputIdle
PeekMessageA
BeginPaint
MapWindowPoints
WaitMessage
OpenDesktopW
CloseDesktop
MoveWindow
EnumWindows
IsCharAlphaNumericW
SetMenuDefaultItem
CharToOemW
IsCharAlphaW
CharPrevA
GetMenuItemRect
SendMessageA

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bb413d78142518e9b77cd9c0f2df0be

Headers

File Characteristics

PDB Paths

Imports

shlwapi

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 110KB - Virtual size: 109KB

.data Size: 14KB - Virtual size: 113KB

.rsrc Size: 173KB - Virtual size: 172KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 110KB - Virtual size: 109KB

.data
Size: 14KB - Virtual size: 113KB

.rsrc
Size: 173KB - Virtual size: 172KB

.reloc
Size: 2KB - Virtual size: 1KB