3afe81a5d24159acd26cef764f2e5c00_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3afe81a5d24159acd26cef764f2e5c00_JaffaCakes118
Size

218KB
MD5

3afe81a5d24159acd26cef764f2e5c00
SHA1

a8365368345174f9f54a29d547a060ddaadaa780
SHA256

5c9e95ee15520967a3037b7f644d7e1088fe7a606ccfc5a10e5fc45310fe12c6
SHA512

411cf58a296cbe07570db36e709375eb76eeb18451b0bed0d57f8b9e38139f0141b62fabc7488434b564ae561da956a2b6968c3f69963381c4910e8d9aac10b7
SSDEEP

6144:dTeZGbNog/MZuQmlO6VjuXQ9dMUmX2NARfOi/pAntvEZX:dTeZGeZklO2uA9dMU7N6fH6c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3afe81a5d24159acd26cef764f2e5c00_JaffaCakes118

Files

3afe81a5d24159acd26cef764f2e5c00_JaffaCakes118
.exe windows:5 windows x86 arch:x86

83c845fc8b48e87e90dec4ec3567fe33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Silkpea\From abo\Mojocoy\j.pdb

Imports

msvcrt

atoi
_wtoi
wcschr
isxdigit
islower
toupper
_mbctoupper
isspace

wininet

InternetConnectW

shlwapi

PathRemoveExtensionW
ChrCmpIA
PathCanonicalizeW
ord29
ChrCmpIW
ord155
PathRenameExtensionW
IsCharSpaceA
PathRelativePathToA

comctl32

ImageList_AddMasked
CreateStatusWindowW
CreateToolbarEx

user32

SetClipboardData
UpdateWindow
CountClipboardFormats
OpenWindowStationW
SetWindowTextA
DdeNameService
InsertMenuA
SetCaretPos
IsWindowVisible
GetSystemMetrics
BeginDeferWindowPos
ScrollWindowEx
ReleaseCapture
UnhookWindowsHookEx
OpenClipboard
PostThreadMessageW
SetMenuDefaultItem
RemoveMenu
ClipCursor
SetThreadDesktop
GetClassInfoA
EnableScrollBar
GetActiveWindow
DrawMenuBar
SwitchDesktop
IsDlgButtonChecked
DefMDIChildProcW
IsCharLowerW
GetSysColorBrush
SetMenu
LoadAcceleratorsA
CheckDlgButton
GetMenuStringA
SetWindowPos
GetDesktopWindow
DestroyCaret
GrayStringW
TabbedTextOutA
CharLowerBuffA
DestroyCursor
EndDialog
IsWindowUnicode
ChangeClipboardChain
SetClassLongA
MapVirtualKeyExW
EmptyClipboard
GetClipboardData
GetWindowLongA
GetWindowLongW
CreateWindowStationA
DdeUninitialize
UnionRect
DdeQueryConvInfo
MapVirtualKeyA
GetAsyncKeyState
TrackPopupMenuEx
GetKeyboardLayout
IsCharAlphaNumericW
GetMenu
GetForegroundWindow
SetSysColors
LockWindowUpdate
IsDialogMessageA
DrawFocusRect
GetCapture
GetClassLongW
ShowCaret
SendMessageA
GetWindowTextLengthA
CloseDesktop
GetMenuCheckMarkDimensions
SetFocus
FindWindowW
SetParent
CopyAcceleratorTableA
IsCharAlphaW
GetMenuStringW
WaitForInputIdle
IsHungAppWindow
GetFocus
InSendMessage
ReplyMessage
SetMenuItemBitmaps
GetKeyState
TabbedTextOutW
GetLastActivePopup
SetCapture
GetMessageExtraInfo
DdeGetLastError
IsChild
IsCharAlphaA
GetMenuItemID
IsIconic
GetThreadDesktop
GetWindowDC
OpenIcon
IsMenu
GetWindowRect
HideCaret
MapVirtualKeyW
GetDlgItemInt
CloseClipboard
GetWindowTextLengthW
SetCursor
DestroyWindow
CopyAcceleratorTableW
ShowOwnedPopups
VkKeyScanA
CheckMenuItem
GetDlgCtrlID
CheckRadioButton
GetDlgItem
SetLastErrorEx
GetDC
GetParent
ImpersonateDdeClientWindow
VkKeyScanW
GetMessagePos
CharToOemA
SetDlgItemTextA
DdeConnect
wvsprintfA
GetSysColor
SetWindowsHookExA
EnableMenuItem
SetClassLongW
AppendMenuW
BringWindowToTop
CheckMenuRadioItem
GetDoubleClickTime
IsCharUpperW
EnumClipboardFormats
IsWindowEnabled
GetProcessWindowStation
ChildWindowFromPointEx
SetForegroundWindow
IsZoomed
DdeCreateStringHandleW
TrackPopupMenu
DestroyAcceleratorTable
ArrangeIconicWindows
CharNextA
GetPropW
ChangeDisplaySettingsA
DefMDIChildProcA
FindWindowExW
RegisterDeviceNotificationW
GetMenuState
GetClassNameW
InSendMessageEx
CharLowerA
SetPropA
GetWindowTextA
GetWindowModuleFileNameA
IsDialogMessageW
LoadStringA
FillRect
PostThreadMessageA
DefWindowProcW
GetClipboardOwner
GetMessageTime
GetWindowThreadProcessId
GetWindow
EndTask
GetClassLongA
GetShellWindow
UnregisterHotKey
DestroyMenu
FindWindowA
LoadCursorA
SetWindowTextW
DestroyIcon
EndDeferWindowPos
DrawFrameControl
MessageBoxExW
GetScrollPos
GetDialogBaseUnits
RegisterHotKey
DeleteMenu
GetTopWindow

gdi32

TextOutA
SetBitmapBits
GetLayout
ExtTextOutW
CreateHatchBrush
DeleteDC
ExcludeClipRect
CreateICA
EnumFontFamiliesExW
BeginPath
RemoveFontResourceA
CreateHalftonePalette
SetRectRgn
CreateFontW
GetTextMetricsA
PtInRegion
CombineRgn
OffsetRgn
GetTextExtentExPointA
Escape
TextOutW
GetStockObject

comdlg32

GetOpenFileNameW

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83c845fc8b48e87e90dec4ec3567fe33

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

wininet

shlwapi

comctl32

user32

gdi32

comdlg32

Sections

.text Size: 121KB - Virtual size: 121KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 121KB - Virtual size: 121KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 11KB - Virtual size: 10KB