feebf6b7cdfb30efd3e10f75ec44a788_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

feebf6b7cdfb30efd3e10f75ec44a788_JaffaCakes118
Size

158KB
MD5

feebf6b7cdfb30efd3e10f75ec44a788
SHA1

be7e577daf85ef98ea82bf61e899f3ce79f3dcea
SHA256

2451c72ad7a410c030809cc53d672d72ce08d96368e8cbe06da9f0d60604d10e
SHA512

714f449797a2c61245bff49312466393aa952c7e964b08ee80f47b7773a7f56b6aed11576f1d9b0eb3317841f04afcbcec7399e74de9589752ab4ae0a748b94a
SSDEEP

3072:/oO3ysULpq8kuApuMEOusesKuP6qs7Z5Ql/vXjgb8vB:/Is0k8KuTsewCqs7ZKBvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feebf6b7cdfb30efd3e10f75ec44a788_JaffaCakes118

Files

feebf6b7cdfb30efd3e10f75ec44a788_JaffaCakes118
.exe windows:5 windows x86 arch:x86

769356a914f5cc3cc1690dd71db42ed2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\gjtHFRNtufHSqC\opdNzGxisAglx\pIwjCfrznzt\buobOgt\orxTyHY.pdb

Imports

comdlg32

GetFileTitleW
GetOpenFileNameA
PrintDlgW
ChooseFontW
PageSetupDlgW
PrintDlgExW

kernel32

GetLocalTime
AddAtomW
UnlockFile
GetModuleHandleW
LocalFree
CreateFileMappingW
SizeofResource
ReleaseMutex
IsDBCSLeadByteEx
DeleteFileW
GetModuleFileNameW
GetACP
WinExec
TryEnterCriticalSection
GetProcessHeap
SetSystemTime
GetUserDefaultLCID
FlushViewOfFile
lstrcpynW
Sleep
HeapAlloc
GetCommConfig
CreateThread
ClearCommBreak
IsBadReadPtr
WaitCommEvent
UnhandledExceptionFilter
SetEvent
LocalAlloc
GetTempPathA
lstrcatW
SetWaitableTimer
GlobalLock
SetUnhandledExceptionFilter
FindClose
EnumResourceLanguagesA
HeapReAlloc
HeapFree
WaitForSingleObjectEx
HeapValidate
GlobalFlags
SetTimerQueueTimer
LocalLock
ConvertDefaultLocale
CreateSemaphoreA
LocalUnlock
VirtualProtect
GetUserDefaultLangID
GetDateFormatA
GetLocaleInfoW
GlobalReAlloc
SetCommBreak
SetFileTime
GetFullPathNameA
lstrcpyA

shlwapi

UrlIsA

msvcrt

iswprint
_controlfp
fgetc
__set_app_type
fflush
__p__fmode
wcscoll
strchr
fwrite
strncpy
free
fgets
toupper
swscanf
islower
realloc
atol
vswprintf
strpbrk
__p__commode
malloc
fread
mbtowc
wcslen
time
srand
_amsg_exit
iswalpha
wcsrchr
_initterm
strtol
printf
_ismbblead
mktime
gmtime
_XcptFilter
wcsncmp
sscanf
_exit
wcscat
isprint
_cexit
towupper
wcsstr
strspn
__setusermatherr
__getmainargs

user32

SendMessageA
ModifyMenuW
IsWindowVisible
MapVirtualKeyW
GetSysColorBrush
GetDoubleClickTime
GetKeyboardLayoutList
SetWindowLongA
EnableWindow
SystemParametersInfoA
GetClipCursor
CharNextExA
GetAltTabInfoA
TrackPopupMenuEx
GetWindowLongW
DispatchMessageA
DefWindowProcA
LoadStringW
IsCharAlphaW
GetMonitorInfoW
SetTimer
ScreenToClient
RemoveMenu
CreateDialogIndirectParamW
DialogBoxIndirectParamW
CopyImage
GetForegroundWindow
ShowCaret
DestroyCaret
IntersectRect
UnloadKeyboardLayout
SetWindowPos
GetScrollPos
BeginPaint
CharNextW
SetCursor
DrawTextW
CreateCursor
OemToCharA
SetMenu
DialogBoxParamW
AdjustWindowRect
GetCaretPos
DrawStateA
DrawAnimatedRects
GetSysColor
OpenDesktopW
InvalidateRgn
GetNextDlgTabItem
GetMenu
CheckMenuRadioItem
SetParent
LockWindowUpdate
LoadStringA
GetKeyboardType
FindWindowA
GetDC
GetMenuItemRect
AppendMenuA
GetMenuItemCount
TrackPopupMenu
ShowScrollBar
InsertMenuA
GrayStringW
GetPropW
EnumWindows
GetMenuItemInfoW
RegisterWindowMessageW
GetClassInfoA
SendNotifyMessageW
CheckMenuItem
CreateWindowExA
PostMessageA
LoadIconA
GetDCEx
ReplyMessage
RemovePropW
SetCaretPos
GetKeyboardLayout
DrawEdge
GetMenuStringW
PostQuitMessage
IsMenu
SetActiveWindow
GetWindowLongA
CharToOemA
MoveWindow
LoadAcceleratorsW
CharToOemW
GetClassLongW
CloseDesktop
DrawIconEx
GetMessageTime
AdjustWindowRectEx
GetActiveWindow
LoadCursorW
ToUnicodeEx
CharPrevA
DestroyWindow
GetFocus
WaitForInputIdle
LoadImageW
DestroyCursor
FindWindowW
GetNextDlgGroupItem
GetWindowPlacement
GetUserObjectInformationA
CreateCaret
LoadImageA
AllowSetForegroundWindow
IsDlgButtonChecked
GetDialogBaseUnits
GetScrollRange
ArrangeIconicWindows
CopyRect
ShowOwnedPopups
CharPrevW
IsDialogMessageW

comctl32

CreatePropertySheetPageA
ImageList_AddMasked
PropertySheetA
ImageList_GetIcon
CreateStatusWindowW
InitCommonControlsEx

Exports

Exports

?TestAccountSecDUoiJDK@@YGKGE[D

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

769356a914f5cc3cc1690dd71db42ed2

Headers

File Characteristics

PDB Paths

Imports

comdlg32

kernel32

shlwapi

msvcrt

user32

comctl32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 104KB

.rsrc Size: 127KB - Virtual size: 126KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 104KB

.rsrc
Size: 127KB - Virtual size: 126KB

.reloc
Size: 1KB - Virtual size: 1KB