13ac090783171a6e1af9df5423f1db71_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

13ac090783171a6e1af9df5423f1db71_JaffaCakes118
Size

744KB
MD5

13ac090783171a6e1af9df5423f1db71
SHA1

076e0f9a409f6b52882054497174ddd6addce974
SHA256

e0da5db851240cd8822d354e069a25c9a5b9d0bdb1b51e9ef14eff4735809b5d
SHA512

a16b5dad75176f354c0f55f4f7631c5afffa03bcb5dad0aa7ea7c8a21071016050a85f0363fce78916318cba7d38e6f62a26754ddf6a0678459e5a7624f22515
SSDEEP

12288:oH44kwoCESlQ8qpjCAlvOpUwP8L6QgsxLpk2tyKMJN4/TCZv7M:oH44hoCzZqVrv8a6Qgs/k2tP0NOG9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13ac090783171a6e1af9df5423f1db71_JaffaCakes118

Files

13ac090783171a6e1af9df5423f1db71_JaffaCakes118
.dll windows:5 windows x86 arch:x86

90e2cff79e5ed122b96fc298464d3521

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\NHnxiirsstAKGe\clilxcwIkeHmaq\MkLilkwz\kuScTfwdgkn.pdb

Imports

shlwapi

StrToIntA

user32

IsCharAlphaNumericW
CharNextA
GetIconInfo
CharToOemW
PostMessageA
AdjustWindowRect
IsCharUpperA
GetWindowTextLengthW
SetCursor
FindWindowExA
LockWindowUpdate
AdjustWindowRectEx
GetAltTabInfoA
BeginPaint
CharUpperW
TranslateAcceleratorA
GetWindowTextA
CopyAcceleratorTableW
EnableScrollBar
MapDialogRect
LoadCursorW
CallWindowProcW
GetKeyboardLayoutNameW
CopyImage
LoadMenuA
MessageBoxExW
MapVirtualKeyExW
SetPropW
CreateWindowExA
DialogBoxParamA
InsertMenuA
IsDlgButtonChecked
SendDlgItemMessageW
SetRect
MapWindowPoints
RegisterWindowMessageA
GetClassInfoExA
MoveWindow
SetSysColors
AppendMenuW
MapVirtualKeyA
SetWindowTextW
PostQuitMessage
CharLowerA
GetKeyNameTextW
GetMessageW
IsChild
ChildWindowFromPoint
DrawIconEx
SetCaretPos
DialogBoxIndirectParamW
SetWindowLongA
TranslateMessage
GetSystemMenu
GetKeyboardType
SetDlgItemInt
SetLastErrorEx
GetKeyState
OpenIcon
ScrollWindowEx
InsertMenuItemW
IsWindowUnicode
RegisterClassW
GetDlgItemTextW
GetWindow
SetWindowTextA
OemToCharA
CreateDialogParamA
SetWindowLongW
FindWindowA
GetUpdateRgn
CreateDialogParamW
DialogBoxIndirectParamA
RegisterClassExW
GetClassLongW
EnableMenuItem
DeleteMenu
LoadImageA
GetWindowLongW
RemovePropW
GetScrollInfo
SetTimer
CloseDesktop
MessageBoxA
FrameRect
WaitMessage
GetParent
IsMenu
IsRectEmpty
GetMonitorInfoW
CharPrevW
GetUserObjectInformationA
InSendMessage
SendMessageA
DrawTextA
ScreenToClient
GetFocus
AllowSetForegroundWindow
GetMenuCheckMarkDimensions
SendMessageW
SetActiveWindow
CharLowerW
CharPrevA
LoadBitmapA
InvertRect
DestroyMenu
SendNotifyMessageW
EnumWindows
MapVirtualKeyW
ChangeMenuW
WindowFromPoint
FindWindowW
SetUserObjectInformationW
CreateIconIndirect
LoadAcceleratorsW
LoadBitmapW
ShowOwnedPopups
FillRect
GetDlgItem
GrayStringW
EnableWindow
DrawFrameControl

msvcrt

time
putc
memset
gets
_controlfp
setlocale
ungetc
wcslen
__set_app_type
vsprintf
malloc
fclose
__p__fmode
strrchr
wcstol
__p__commode
islower
srand
iswctype
wcsncpy
mbstowcs
wcstombs
_amsg_exit
strchr
_initterm
strstr
tolower
isalpha
toupper
_ismbblead
strcpy
wcspbrk
fputc
sprintf
_XcptFilter
fflush
_exit
swprintf
getc
free
iswprint
setvbuf
wcstok
_cexit
__setusermatherr
printf
strerror
__getmainargs

kernel32

UnmapViewOfFile
RemoveDirectoryW
CancelWaitableTimer
ReadFile
DisconnectNamedPipe
GetLastError
SetupComm
SleepEx
GlobalAddAtomW
CloseHandle
GetCurrentThreadId
WriteFile
FormatMessageA
GetTempPathA
GetDateFormatW
GetUserDefaultLCID
HeapFree
HeapAlloc
GetModuleFileNameA
FindResourceExW
SetFileAttributesW
GetCurrentThread
SearchPathA
InitializeCriticalSection
CreateThread
SetFileApisToOEM
CopyFileA
lstrcpynA
EnterCriticalSection
IsBadReadPtr
lstrlenA
FindClose
lstrcpynW
GetFileAttributesExA
LocalUnlock
MoveFileExW
DefineDosDeviceW
WaitForSingleObject
GetVersionExW
MoveFileA
LoadLibraryExA
CompareStringW
GetProcessHeap
FileTimeToSystemTime
MapViewOfFile
GlobalGetAtomNameA
CreateMailslotW
HeapReAlloc
LockFile
HeapValidate
GetCommConfig
CreateNamedPipeW
LocalReAlloc
GetFullPathNameW
FindNextFileW
lstrcatA
AddAtomA
CancelIo
CallNamedPipeW

Exports

Exports

showtit[D
?InsertRawPointDyXBc@@YGKHGE[D

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 712KB - Virtual size: 712KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90e2cff79e5ed122b96fc298464d3521

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 1.3MB

.rsrc Size: 712KB - Virtual size: 712KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 1.3MB

.rsrc
Size: 712KB - Virtual size: 712KB

.reloc
Size: 1KB - Virtual size: 1KB