17cd2b816fd22538f405d2417ff110bd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

17cd2b816fd22538f405d2417ff110bd_JaffaCakes118
Size

146KB
MD5

17cd2b816fd22538f405d2417ff110bd
SHA1

15ef28828ba0248da96d9d7adac0d222771455d5
SHA256

8629a7373ee55ab4e521afd0b7711b60060c4509fcac3a6071d125e824b2ab68
SHA512

e787684409f293eaf8caf3112a07967baf22307f903a5cd00a19a52acb343e1249f9bbc79bf933316c283369857eb0a6f5eb302769d4e9b18fac4ea9a4fe79e7
SSDEEP

3072:D4/OYfwm4LH3dDrw0MXkdzbWo2dx40VhpJe4LH/EUt:DBtDrhM09yo2PfphLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17cd2b816fd22538f405d2417ff110bd_JaffaCakes118

Files

17cd2b816fd22538f405d2417ff110bd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0cc1a303846e4ba95c587890a71d481

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Y:\sXqpGqvka\TapMvMralk\sagpxgkkb\ihTdehT.pdb

Imports

kernel32

GlobalMemoryStatus
HeapLock
GlobalAlloc
ClearCommError
HeapFree
HeapCreate
CopyFileA
GetSystemDirectoryA
WaitForMultipleObjects
SetSystemTimeAdjustment
GlobalMemoryStatusEx
lstrcmpiW
GlobalAddAtomW
FlushViewOfFile
DeleteFileW
GetLongPathNameW
FindNextChangeNotification
CreateFileA
RegisterWaitForSingleObject
lstrcpynA
SetCurrentDirectoryA
OpenFileMappingA
Sleep
LoadResource
SetCommBreak
MoveFileExW
HeapValidate
GlobalDeleteAtom
WaitForMultipleObjectsEx
CreateFileMappingA
CreateMutexA
HeapWalk
CompareFileTime
GetProcessHeap
GlobalLock
GetLocaleInfoA
SetThreadExecutionState
CreateEventA
lstrlenW
GlobalSize
GetOverlappedResult
GetSystemWindowsDirectoryA
ConvertDefaultLocale
GetCompressedFileSizeW
CreateNamedPipeW
GetModuleHandleA
GetThreadContext
GetLastError
ExitThread
TlsFree
GetComputerNameExW
GetUserDefaultLangID
CreateWaitableTimerA
CallNamedPipeW
GetBinaryTypeW
HeapAlloc
GetPriorityClass
GetModuleFileNameA

msvcrt

strerror
_controlfp
towlower
strncmp
__set_app_type
wcstombs
mbstowcs
time
wcscmp
fclose
__p__fmode
mktime
bsearch
__p__commode
fgets
strncpy
strchr
wcsncpy
wcscat
wcstod
_amsg_exit
swscanf
wcsncmp
gets
qsort
strspn
_initterm
_ismbblead
wcslen
_XcptFilter
_exit
_cexit
ungetc
__setusermatherr
sprintf
strpbrk
srand
rand
remove
perror
puts
__getmainargs
atoi
clock
wcscoll
towupper
setvbuf

comctl32

ImageList_Draw
CreateStatusWindowW
ImageList_ReplaceIcon
CreateToolbarEx
ImageList_Create
ImageList_GetIcon

user32

FindWindowW
GetLastActivePopup
SetMenuItemBitmaps
FindWindowExW
AdjustWindowRect
MonitorFromRect
ScrollWindow
GetSysColor
CreateDialogParamW
EnableScrollBar
CharLowerBuffW
OpenDesktopW
ActivateKeyboardLayout
SetTimer
HideCaret
CloseDesktop
CharUpperA
DialogBoxParamA
InvalidateRect
SetScrollPos
GetDCEx
GetMessageA
RegisterClassA
ExitWindowsEx
GetAsyncKeyState
GetKeyboardLayoutList
LoadIconA
InsertMenuA
BeginDeferWindowPos
GetKeyNameTextW
GetWindowDC
CreateWindowExA
TranslateAcceleratorA
SetActiveWindow
SetDlgItemTextA
OemToCharBuffA
ChildWindowFromPoint
AttachThreadInput
IsDlgButtonChecked
MoveWindow
GetParent
GetCaretPos
CreateDialogIndirectParamW
GetMenuCheckMarkDimensions
DefWindowProcA
MapVirtualKeyA
SetCursorPos
CallWindowProcA
DispatchMessageA
IsChild
SetMenu
WaitMessage
InternalGetWindowText
SetClassLongW
SetWindowPlacement
FrameRect
SendDlgItemMessageA
IsCharAlphaW
LoadAcceleratorsW
SetWindowRgn
GetMenuStringW
GetShellWindow
DrawFrameControl
IsWindowUnicode
SetDlgItemTextW
GetWindowPlacement
LoadBitmapW
LoadIconW
CascadeWindows
EnumWindows
CharNextA
MessageBoxExA
DragObject
wsprintfW
GetDlgItemTextW
CreateIconIndirect
LookupIconIdFromDirectory
RegisterClassExA
LoadStringA
GetClassNameW
GetFocus
WindowFromPoint
GetUpdateRgn
CharUpperW
IsCharUpperA
GetMenuItemID
GetSysColorBrush
SwitchToThisWindow
AdjustWindowRectEx
SetWindowLongW
MonitorFromPoint
GetPropW
RegisterClassW
IsCharAlphaA
DefFrameProcA
KillTimer
IsIconic
ClipCursor
MapDialogRect
GetGUIThreadInfo
GetMonitorInfoW
DrawIcon
VkKeyScanW
SetPropW
AppendMenuW
DefFrameProcW
DrawEdge
DrawStateW
GetMenuState
TranslateMessage
TrackPopupMenuEx
GetClassInfoW
GetCursorPos
LoadCursorW
SendMessageA
GetMessageTime
CreateIconFromResource
GetForegroundWindow
GetTopWindow
DrawStateA
wvsprintfW

Exports

Exports

?DialogReactivateIns@@YGK_KHE[D

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0cc1a303846e4ba95c587890a71d481

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

comctl32

user32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 15KB - Virtual size: 94KB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 15KB - Virtual size: 94KB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 1KB - Virtual size: 1KB