3738f1d3c3aaf841609fdeea94571714_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3738f1d3c3aaf841609fdeea94571714_JaffaCakes118
Size

179KB
MD5

3738f1d3c3aaf841609fdeea94571714
SHA1

f1adeae0354a7316852ed63e560e7e1df7f78095
SHA256

576bef233b1956b6d418d61f393cf3a67c567954b6fa7776ced1e8e582b6b847
SHA512

f0adc773dd0b93f363d57e5c76752e7db17a9b491d85c470caa96feed0df11b46bb3f5c41d4715d439feb713bfa006f7105ac210d8aea96e6d1fd2068bab85a6
SSDEEP

3072:yOXA1S6rQt5N+Sc8tjrr6snJ3SXcXuE/70wIdRQri5kCF:ESwcNhc89r6snJCXcXuEoLQXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3738f1d3c3aaf841609fdeea94571714_JaffaCakes118

Files

3738f1d3c3aaf841609fdeea94571714_JaffaCakes118
.exe windows:5 windows x86 arch:x86

98845c68dd2a812d929b197a0894eede

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetOpenA

kernel32

FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetProcessHeap
ReadFile
CompareStringA
lstrlenA
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
LocalAlloc
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
GetModuleHandleA
GlobalAddAtomA
lstrcmpA
GlobalFlags
GlobalGetAtomNameA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FreeLibrary
RtlUnwind
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RaiseException
WriteFile
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcAddress
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
GetComputerNameA
GetWindowsDirectoryA
GetVersionExA
WinExec
Sleep
GetModuleFileNameA
ExpandEnvironmentStringsA
InterlockedDecrement
FindResourceA
SizeofResource
LockResource
LoadResource
GetLastError
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile

user32

RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
TabbedTextOutA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
EnableMenuItem
CheckMenuItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
GetWindowTextA
SetWindowTextA
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
DestroyMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GrayStringA
DrawTextExA
GetClassInfoA
DrawTextA
PostQuitMessage
CreateWindowExA
DispatchMessageA
GetMessageA
SetTimer
ModifyMenuA

shell32

ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx

oleaut32

VariantChangeType
VariantClear
SysAllocString
SysFreeString
VariantInit

urlmon

URLDownloadToFileA

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

DeleteDC
GetStockObject
SetViewportOrgEx
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
SelectObject
Escape
TextOutA
RectVisible
ScaleWindowExtEx
SetWindowExtEx
DeleteObject
ScaleViewportExtEx
SetViewportExtEx
GetDeviceCaps
PtVisible
OffsetViewportOrgEx

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98845c68dd2a812d929b197a0894eede

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

shell32

ole32

oleaut32

urlmon

oleacc

gdi32

winspool.drv

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 10KB - Virtual size: 9KB