0b8db2b45cdb89890f423acf85f4482a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b8db2b45cdb89890f423acf85f4482a_JaffaCakes118
Size

190KB
MD5

0b8db2b45cdb89890f423acf85f4482a
SHA1

002181bcd1d7310c934c4bfad2d28c950ca01f19
SHA256

9383d5f7b195fd1829e76ff6f36937ab94ca831691958a471258d1daffe4200a
SHA512

8a27288ba25cb206600c0efcc72448ed285f0eeec54666127275a50f0cd3cda9b080b365cdc98086fbe8149f9821502612514a6439a3353a99a2e3db9a072e7e
SSDEEP

3072:BOE825ieUSHDbhAHKPAEYI/lfAd+KUxa0fC3OHAwoa7:l8MUGvhAsYIlAUKUxiOgl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8db2b45cdb89890f423acf85f4482a_JaffaCakes118

Files

0b8db2b45cdb89890f423acf85f4482a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5c62f36bbe205a380f8f4317df1d294d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\mzquvgoyEef\xxrocknpxapTk\lvHhvHRsgjqhvF\vtlgrPngmJuEvH\ZfoiVdbojce.pdb

Imports

gdi32

DPtoLP
RealizePalette
CreatePalette
CreatePen
SetBitmapBits
PathToRegion
Polyline
RoundRect
SelectClipRgn
GetObjectW
StartPage
CreateBitmapIndirect
SetWindowOrgEx
GetClipBox
GetTextCharsetInfo
OffsetRgn
ResizePalette
PatBlt
SetBitmapDimensionEx
StartDocW
DeleteObject
GetRgnBox
PtVisible
MoveToEx
GetObjectA
CreateBrushIndirect
GetWindowOrgEx
RectVisible
Polygon
ScaleViewportExtEx
CreatePatternBrush
Ellipse
GetDIBColorTable
FillRgn
SelectPalette
CreateFontIndirectW
SetWindowExtEx
CreateICW
GetBkMode
TextOutA
GetTextAlign
CreateFontIndirectA
ExtTextOutW
GetStockObject
ExtTextOutA
EndPath
SetBrushOrgEx
SetROP2
SetBkColor
StretchBlt
ScaleWindowExtEx
BitBlt
GetTextExtentPoint32A
GetDIBits
PtInRegion
SetStretchBltMode
SetLayout
CreateHatchBrush
ExcludeClipRect
TranslateCharsetInfo
GetCurrentObject
SetTextAlign
GetTextExtentPointA
GetViewportOrgEx
CreateBitmap

user32

CopyImage
EndTask
keybd_event
LoadCursorW
SetMenuItemBitmaps
DialogBoxIndirectParamW
FindWindowExA
SetForegroundWindow
CheckRadioButton
GetNextDlgGroupItem
FillRect
PeekMessageA
CreateWindowExW
IsWindowUnicode
InSendMessageEx
InsertMenuA
CopyAcceleratorTableW
MapVirtualKeyA
TileWindows
SetDlgItemInt
SetPropW
SetDlgItemTextW
CharToOemA
OpenIcon
DestroyCaret
DefWindowProcW
IsMenu
InternalGetWindowText
IsDlgButtonChecked
MessageBoxW
EnumThreadWindows
InvalidateRect
DestroyAcceleratorTable
GetCursorPos
LoadImageW
GetKeyboardType
GetDC
DrawFrameControl
AdjustWindowRect
CheckDlgButton
GetMenuStringW
ShowCursor
TrackPopupMenu
ScrollWindow
CloseDesktop
CharToOemBuffA
SendMessageTimeoutA
GetScrollPos
GetUserObjectInformationA
GetCaretPos
CharLowerBuffW
IsCharUpperA
GetDlgItemTextW
ArrangeIconicWindows
DrawStateW
VkKeyScanW
DestroyMenu
UnionRect
DispatchMessageA
CreateCursor
GetLastActivePopup
CreateIconIndirect
GetKeyboardLayoutList
ActivateKeyboardLayout
CreateWindowExA
RegisterClassExA
DrawTextExW
GetMenuItemInfoW
FindWindowW
GetTopWindow
SetActiveWindow
DeferWindowPos
DefFrameProcA
EnableScrollBar
FindWindowA
SetWindowRgn
GetMenuItemRect
CreateDialogIndirectParamW
CallWindowProcA
DrawMenuBar
SetCursor
IntersectRect
PostThreadMessageA
GetWindowTextA
TranslateAcceleratorA
GetDlgCtrlID
GetMessageA
SetTimer
SetWindowLongA
BeginPaint
LoadMenuA
SetMenuDefaultItem
GetWindowTextW
wvsprintfW
RemoveMenu
GetWindow
RegisterWindowMessageW
GetMenuItemID
RegisterClassExW
DefFrameProcW
EnableMenuItem
SetWindowLongW
GetKeyState
UpdateWindow
GetMessageTime
GetDoubleClickTime
ShowWindow
ReleaseDC
GetMessageW
GetFocus
GetWindowLongA
SetWindowPlacement
PtInRect
DispatchMessageW
ClipCursor
LoadStringW
SetWindowTextA
DialogBoxParamA
PostQuitMessage
GetAsyncKeyState
CheckMenuItem
GetIconInfo
GetDCEx
DialogBoxParamW
OpenInputDesktop
GetScrollInfo
SetRectEmpty
PeekMessageW
GetSystemMetrics
SystemParametersInfoW
DefWindowProcA
EqualRect
LoadAcceleratorsA
ChangeMenuW
MapVirtualKeyW
SwapMouseButton
DrawEdge
LoadIconA
CharPrevW
DrawTextA
LoadMenuW
GetClientRect
BringWindowToTop
GetDesktopWindow
ClientToScreen
WaitForInputIdle
CharNextExA
SetRect
MonitorFromPoint
SetScrollRange
PostMessageA
ShowOwnedPopups
MessageBoxExA
LoadImageA
OffsetRect
GetWindowDC
MonitorFromRect
LoadCursorA
WaitMessage
OemToCharA

msvcrt

printf
wcscat
_controlfp
isalpha
towupper
mktime
strtol
isxdigit
bsearch
strcpy
clock
__set_app_type
calloc
iswprint
mbstowcs
__p__fmode
wcscmp
system
wcstod
strpbrk
__p__commode
iswalpha
isspace
fseek
_amsg_exit
fread
_initterm
_ismbblead
wcsrchr
strspn
srand
gets
_XcptFilter
clearerr
time
putchar
wcstombs
toupper
_exit
strcspn
iswctype
iswxdigit
isprint
wcschr
exit
realloc
_cexit
iswdigit
__setusermatherr
wcspbrk
__getmainargs
setlocale
strncpy
iswspace
ftell
strchr
qsort
sprintf
fgetc
towlower

kernel32

lstrcmpiW
MoveFileA
GetSystemDefaultLangID
GlobalGetAtomNameA
EnumResourceTypesA
GetSystemDirectoryW
GetLastError
FindClose
SetupComm
GetComputerNameA
UnlockFile
SetFileAttributesA
GlobalAlloc
SetHandleCount
CancelIo
LocalLock
GetDateFormatW
EnumResourceNamesW
GlobalFindAtomW
GetLocaleInfoA
GetThreadContext
SetCommState
CompareStringW
OpenEventA
RtlUnwind
AddAtomA
MulDiv
GetLongPathNameW
FindResourceExA
FindFirstChangeNotificationW
WriteFile
LoadLibraryA
FileTimeToLocalFileTime
SystemTimeToFileTime
lstrcpynW
DeleteFileA
GetModuleHandleA
OpenFileMappingW
HeapReAlloc
GetCPInfo
WaitCommEvent
LoadLibraryExA
GetSystemDirectoryA
SetThreadAffinityMask
GetNumberFormatA
GetExitCodeThread
ReadFile
SetThreadPriority
GetSystemTimeAsFileTime
GetHandleInformation
GetModuleFileNameA
SetThreadLocale
Sleep
GetBinaryTypeA
SetEndOfFile
MoveFileW
CreateSemaphoreA
SetLocalTime
TransactNamedPipe
FreeResource
GlobalAddAtomW
GlobalAddAtomA
GetUserDefaultLCID
lstrcpyA
WaitForSingleObjectEx
TlsGetValue
LockFile
IsDBCSLeadByteEx
SetUnhandledExceptionFilter
AreFileApisANSI
GetVersion
ConvertDefaultLocale
lstrcmpW
EnumResourceLanguagesA

comctl32

ImageList_AddMasked
ImageList_Draw
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_Read
ImageList_Write
PropertySheetA
ImageList_Create
ImageList_Remove

Exports

Exports

?GetTimeW@@IJJPAKF@X

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tmp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dust
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ins
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c62f36bbe205a380f8f4317df1d294d

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

msvcrt

kernel32

comctl32

Exports

Exports

Sections

.text Size: 94KB - Virtual size: 93KB

.tmp Size: 1KB - Virtual size: 1KB

.wdata Size: 8KB - Virtual size: 7KB

.edata Size: 512B - Virtual size: 93B

.dust Size: 512B - Virtual size: 28B

.data Size: 2KB - Virtual size: 1KB

.ins Size: - Virtual size: 39KB

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 94KB - Virtual size: 93KB

.tmp
Size: 1KB - Virtual size: 1KB

.wdata
Size: 8KB - Virtual size: 7KB

.edata
Size: 512B - Virtual size: 93B

.dust
Size: 512B - Virtual size: 28B

.data
Size: 2KB - Virtual size: 1KB

.ins
Size: - Virtual size: 39KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 2KB - Virtual size: 2KB