3060d95f2be5f71f0f5f5bab445bb432_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3060d95f2be5f71f0f5f5bab445bb432_JaffaCakes118
Size

304KB
MD5

3060d95f2be5f71f0f5f5bab445bb432
SHA1

4237ff461b812f06fd6a7f1b00b35afaa3ba7236
SHA256

47c60a72745b42021e9d8cabb95b2d170263f6aa00b0fd0f41f9a3fd74056dd1
SHA512

d3b9cfa7aa0a9b336b5624708728b51d0e8bda3d87fc652c5a8a3d9abb7228c8feda1c096772524aa26fd93112fbea41d44060d874dee799e384a41b76ead7c5
SSDEEP

6144:Udk8rhVQKmPiNubv1xvmo2H+ITN/eKWGE0RBeTWz5M:UdkCOiwbdxOo6N/epGdRB9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3060d95f2be5f71f0f5f5bab445bb432_JaffaCakes118

Files

3060d95f2be5f71f0f5f5bab445bb432_JaffaCakes118
.exe windows:5 windows x86 arch:x86

051c0354dd3e121cb513f89a68e95aa8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

setupapi

SetupDiOpenClassRegKey
SetupOpenInfFileA
SetupInstallFromInfSectionA
SetupCloseInfFile

kernel32

SetLastError
SetFilePointerEx
CreateDirectoryA
GetDriveTypeA
GetShortPathNameA
GetVolumeInformationA
GetVolumePathNameA
FindVolumeClose
FindNextVolumeW
QueryDosDeviceW
FindFirstVolumeW
GetCurrentProcessId
FormatMessageW
VirtualQuery
ReleaseMutex
CreateMutexA
SetFileTime
GetFileTime
FlushFileBuffers
GetFileSize
GetFileSizeEx
GetCurrentProcess
GetVersionExA
GetCurrentDirectoryA
LockResource
GetFileAttributesA
SetFilePointer
GetCurrentThreadId
UnhandledExceptionFilter
GetSystemInfo
GetFileInformationByHandle
WaitForSingleObject
GetCurrentThread
SetUnhandledExceptionFilter
SetErrorMode
FindNextFileW
CreateFileW
FindFirstFileW
WriteConsoleA
GetLocaleInfoW
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
LoadLibraryExA
LoadLibraryA
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
SetHandleCount
PeekNamedPipe
GetFullPathNameA
HeapSize
GetStdHandle
HeapCreate
HeapReAlloc
VirtualFree
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStartupInfoA
GetCommandLineA
GetFileType
SetStdHandle
GetFileAttributesW
IsDebuggerPresent
TerminateProcess
ExitProcess
CreateThread
ResumeThread
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
InterlockedCompareExchange
GetModuleHandleW
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
FindResourceA
LoadResource
SizeofResource
FreeLibrary
MoveFileA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
SetCurrentDirectoryA
CopyFileA
FormatMessageA
LocalFree
FindFirstFileA
FindClose
CreateFileA
Sleep
DeviceIoControl
RemoveDirectoryA
DeleteFileA
GetModuleFileNameA
CreatePipe
SetHandleInformation
CreateProcessA
WriteFile
ReadFile
CloseHandle
GetStringTypeW
GetModuleFileNameW
IsDBCSLeadByte
lstrcmpiA
lstrlenA
GetModuleHandleA
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetUserDefaultLCID

user32

PostMessageA
MessageBoxW
MessageBoxA
wsprintfW
CharNextA
GetClassInfoA
SendDlgItemMessageW
SystemParametersInfoW
GetSystemMenu
AppendMenuA
TrackMouseEvent
ExitWindowsEx
GetKeyState
EnumChildWindows
GetDlgCtrlID
GetClassNameA
LoadCursorA
SetCursor
DefDlgProcA
UnregisterClassA
LoadIconA
RegisterClassA
LoadBitmapA
SetWindowLongA
CallWindowProcA
GetWindowLongA
GetWindowTextW
GetSystemMetrics
GetWindowInfo
GetDC
ReleaseDC
MessageBeep
GetClientRect
SetWindowPos
GetWindowTextA
DestroyWindow
GetWindowRect
CreateDialogParamW
MapDialogRect
MoveWindow
SetWindowTextA
SetDlgItemTextA
GetWindowTextLengthA
ShowWindow
SetWindowTextW
SetFocus
EndDialog
DialogBoxParamW
EnableWindow
EnumWindows
SendMessageA
SendMessageW
SendDlgItemMessageA
GetParent
GetDlgItem
InvalidateRect
AppendMenuW

gdi32

GetCurrentObject
GetObjectA
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
DeleteDC
BitBlt
CreateCompatibleDC
SetMapMode
GetDeviceCaps
SelectObject
GetTextExtentPoint32W
GetTextMetricsA
SetBkMode
GetStockObject
DeleteObject
CreateFontIndirectW

advapi32

StartServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ChangeServiceConfigA
RegQueryValueExA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
CloseServiceHandle
DeleteService
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CreateServiceA

shell32

SHBrowseForFolderW
SHGetMalloc
ShellExecuteA
ord680
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHGetFolderPathA
SHChangeNotify
SHGetSpecialFolderLocation

ole32

CoInitialize
CoUninitialize
CoCreateInstance
PropVariantClear
OleInitialize
OleUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
VarUI4FromStr

shlwapi

SHStrDupW

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

051c0354dd3e121cb513f89a68e95aa8

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

setupapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 256KB - Virtual size: 256KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 9KB - Virtual size: 183KB

.rsrc Size: 701KB - Virtual size: 700KB

.text
Size: 256KB - Virtual size: 256KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 9KB - Virtual size: 183KB

.rsrc
Size: 701KB - Virtual size: 700KB