3823c7c5e3a9442fbc0fdd847edeb477_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3823c7c5e3a9442fbc0fdd847edeb477_JaffaCakes118
Size

172KB
MD5

3823c7c5e3a9442fbc0fdd847edeb477
SHA1

f545b8a960458e6c5f079bd089fcecb34c6efb86
SHA256

fdc80762cec8de2717e81a35f656d406d924921813bad2921459a00364bf7443
SHA512

91990ef593c497d644ed40bea245de1cd94ce8276dc4e53a1355d012f6c0be8de065210893dcfdd7f9dfd2046493bac8477b66cf4bd78e9515121d79224d7b18
SSDEEP

3072:ssvSjLv1kFhqrke4DLdZ/uwJLvsN40VEkgefCzigKu7hNEz222:XvIvUhLeWtuWENd6kgeKvA22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3823c7c5e3a9442fbc0fdd847edeb477_JaffaCakes118

Files

3823c7c5e3a9442fbc0fdd847edeb477_JaffaCakes118
.exe windows:4 windows x86 arch:x86

242a6ee6434ff02b5319039f8bd2c2f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

user32

IsDialogMessageA
IsWindow
GetDlgItemTextA
DestroyWindow
SetWindowLongA
ReleaseDC
UnregisterClassA
MoveWindow
EnableWindow
SetDlgItemTextA
GetDlgItem
WinHelpA
GetDialogBaseUnits
ShowWindow
SendMessageA
CreateDialogParamA
GetDC
IsDlgButtonChecked
CheckDlgButton
CharNextA

gdi32

GetTextMetricsA
GetTextExtentPointA
DeleteObject
SelectObject
GetDeviceCaps
CreateFontIndirectA

kernel32

GetThreadLocale
InterlockedIncrement
GetSystemTimeAsFileTime
GetStartupInfoA
GetStdHandle
VirtualAlloc
HeapSize
HeapReAlloc
FreeEnvironmentStringsW
RaiseException
SetHandleCount
GetModuleFileNameA
SetFilePointer
SetHandleInformation
GetACP
LoadResource
FreeLibrary
MulDiv
DisableThreadLibraryCalls
CloseHandle
GetVersionExA
lstrlenA
HeapDestroy
GetCurrentProcess
TransmitCommChar
LeaveCriticalSection
GetModuleHandleA
GetCommandLineA
GetProcAddress
GetSystemInfo
FlushFileBuffers
SetUnhandledExceptionFilter
WideCharToMultiByte
GetLastError
HeapAlloc
HeapCreate
GetEnvironmentStringsW
GetProcessHeap
VirtualQuery
IsBadReadPtr
QueryPerformanceCounter
RtlUnwind
TlsSetValue
SetStdHandle
FlushInstructionCache
lstrcpyA
GetLocaleInfoA
EnumResourceNamesW
GetOEMCP
lstrcpynA
ExitProcess
InitializeCriticalSection
LockResource
UnhandledExceptionFilter
WriteFile
lstrcatA
InterlockedExchange
GetStringTypeA
ExitProcess
FindResourceA
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
TlsAlloc
LCMapStringW
lstrlenW
lstrcmpiA
SizeofResource
InterlockedDecrement
LCMapStringA
LoadLibraryExA
GetCurrentThreadId
IsBadCodePtr
GetFileType
GetEnvironmentStrings
TlsFree
FreeEnvironmentStringsA
LoadLibraryA
TerminateProcess
GetCPInfo
GetCurrentProcessId
SetLastError
EnterCriticalSection
VirtualFree
GetTickCount
IsBadWritePtr
IsDBCSLeadByte
VirtualProtect
TlsGetValue
HeapFree

advapi32

RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyA

shlwapi

PathFindExtensionA

ole32

CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

242a6ee6434ff02b5319039f8bd2c2f0

Headers

File Characteristics

Imports

msimg32

user32

gdi32

kernel32

advapi32

shlwapi

ole32

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 46KB - Virtual size: 46KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 46KB - Virtual size: 46KB

.crt
Size: 512B - Virtual size: 212KB