154c10b13407c0a229516965b9180819_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

154c10b13407c0a229516965b9180819_JaffaCakes118
Size

215KB
MD5

154c10b13407c0a229516965b9180819
SHA1

6824c9f420c8f2946aee200ed52557876813970b
SHA256

8426cfb50477b8ad749412feccdcaaf443bd3b70f6c5616010eeec9d1d07f6f4
SHA512

6e7c3c03e4a86cd3a4c069151cb35b76e5725bc544892411a4f400afe9ce6f83938194495594fedc462dc1ba9fbc0eaa816a134b4dfc7cb6e2b11ac2dd398dfd
SSDEEP

6144:w/dC4fxwR9mM+LU29y+PbnXzEDPOfXgzvhpO+4GtwCz:gdC4Jw/KnbnDuw+bN4Kwu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
154c10b13407c0a229516965b9180819_JaffaCakes118

Files

154c10b13407c0a229516965b9180819_JaffaCakes118
.exe windows:5 windows x86 arch:x86

964a6deee43397ebde6441e1cb57e251

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\HourrrzWj\qoffpddBfS\DqMurwcpw\feosysxdts\zkftjubmAkbga.pdb

Imports

user32

ScrollWindow
SetWindowRgn
GetMessageW
MonitorFromRect
GetActiveWindow
PostThreadMessageA
CreatePopupMenu
SetForegroundWindow
InsertMenuW
ScrollWindowEx
InsertMenuItemW
WaitMessage
GetAsyncKeyState
HiliteMenuItem
GetSysColor
RegisterClassA
RegisterWindowMessageA
CloseDesktop
SendNotifyMessageW
ShowOwnedPopups
SetTimer
DefFrameProcW
GetClassInfoExW
AppendMenuA
OemToCharA
CharLowerA
DrawFrameControl
SetDlgItemTextA
UpdateWindow
GetWindowLongW
GetDlgItemTextA
InvalidateRect
GetMenuState
GetKeyNameTextW
MessageBoxExA
ArrangeIconicWindows
MoveWindow
EnumWindows
GetMenuCheckMarkDimensions
GetFocus
LoadAcceleratorsW
InSendMessageEx
GetUserObjectInformationW
OffsetRect
PostThreadMessageW
LoadAcceleratorsA
ClipCursor
SetWindowLongW
CreateCaret
SetScrollRange
GetMenuItemRect
GetTopWindow
IsDlgButtonChecked
CascadeWindows
ReleaseDC
GetNextDlgGroupItem
SendDlgItemMessageW
CharPrevA
SetWindowPlacement
SetParent
ShowCursor
AdjustWindowRect
SetClassLongW
SendMessageW
CreateWindowExA
IsChild
LoadCursorA
CharNextA
GetMenuStringA
ValidateRect
GetWindowPlacement
ClientToScreen
DefWindowProcW
SetCursor
SetScrollPos
OpenInputDesktop
GetUpdateRect
SetMenuDefaultItem
DrawIconEx
GetCaretPos
TranslateAcceleratorW
SendMessageA
RedrawWindow
RemovePropW
IsWindow
IsMenu
IsCharLowerA
GetMessageTime
InsertMenuA
GetDlgItem
CopyAcceleratorTableW

gdi32

GetDIBColorTable
SetDIBColorTable
SetMapMode
FillRgn
CreatePatternBrush
EnumFontsW
TextOutW
GetBkMode
ExcludeClipRect
GetFontData
GetROP2
CreateFontA
CreateBitmapIndirect
SetStretchBltMode
UnrealizeObject
Ellipse
PtVisible
CreatePolygonRgn
SetBrushOrgEx
StartPage
LineTo
EndPath
GetNearestPaletteIndex
ResizePalette
SetLayout
GetPixel
CreateCompatibleDC
BeginPath
CreateSolidBrush
GetTextColor
RectInRegion
CreateHalftonePalette
CreateFontIndirectW
LPtoDP
StretchDIBits
StretchBlt
DPtoLP
GetCurrentObject

msvcrt

_controlfp
sscanf
wcschr
isdigit
fflush
__set_app_type
iswxdigit
ftell
__p__fmode
wcscspn
vswprintf
wcslen
__p__commode
_amsg_exit
perror
_initterm
_acmdln
exit
system
qsort
_ismbblead
wcsrchr
swscanf
realloc
remove
iswprint
isupper
fseek
_XcptFilter
_exit
atoi
wcstok
_cexit
iswalpha
fputs
wcstol
strcoll
__setusermatherr
fread
__getmainargs

kernel32

CreateSemaphoreW
BuildCommDCBAndTimeoutsW
GetDateFormatA
SetEndOfFile
GetPriorityClass
GlobalMemoryStatus
SetSystemTime
FileTimeToLocalFileTime
GetOEMCP
GetCommTimeouts
GlobalCompact
GetTickCount
TlsGetValue
GetThreadPriority
TlsFree
LocalSize
DeleteAtom
GlobalAddAtomW
VirtualProtect
GetSystemTime
FindNextFileA
GetStartupInfoA
CreateSemaphoreA
lstrlenA
GetSystemWindowsDirectoryW
IsBadStringPtrW
CreateThread
LoadLibraryExA
GetModuleFileNameW
DefineDosDeviceW
TransactNamedPipe
GetSystemDirectoryA
OpenEventW
GetComputerNameA
CreateNamedPipeA
CreateEventW
GetTempPathA
GlobalFlags
VerifyVersionInfoW
GetSystemWindowsDirectoryA
GetSystemTimeAdjustment
GetFullPathNameW

Exports

Exports

?SleepAhHJDud@@YGKEPA_WG@Z
?SleepUDSUDlkdlsds@@YGKEPA_WG@Z
?SleepUDudjkUD@@YGKEPA_WG@Z
?SleepYDyjDuUI@@YGKEPA_WG@Z

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

964a6deee43397ebde6441e1cb57e251

Headers

File Characteristics

PDB Paths

Imports

user32

gdi32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 83KB - Virtual size: 82KB

.data Size: 19KB - Virtual size: 18KB

.rdata Size: 1024B - Virtual size: 56KB

.rsrc Size: 109KB - Virtual size: 108KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 83KB - Virtual size: 82KB

.data
Size: 19KB - Virtual size: 18KB

.rdata
Size: 1024B - Virtual size: 56KB

.rsrc
Size: 109KB - Virtual size: 108KB

.reloc
Size: 2KB - Virtual size: 1KB