3a685eb90c62755361d1c69f38418377_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3a685eb90c62755361d1c69f38418377_JaffaCakes118
Size

75KB
MD5

3a685eb90c62755361d1c69f38418377
SHA1

14ea0d73342aa4a16fcd548475a7e9d6ad9ed011
SHA256

ccee32737708132e31078858749cbf0e12fca92afd41c877a49a3951f54427ec
SHA512

cd15e51d436fc74a61d208bf8e3897680d945ca5bc4ff83a617da192d0158365f490f47fd3a92cbd6f81286886c6919c2e3abe6b993fd25255f70cc9d0fb5cbe
SSDEEP

1536:cCanM3t68S8wHrBc6M7/G87Y+j++f+nIYNqp/Tc0hUaTO2Esyq+D6p:cCiBBc6/87HDf+DEp/Tc0RTOr56p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a685eb90c62755361d1c69f38418377_JaffaCakes118

Files

3a685eb90c62755361d1c69f38418377_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4272981cd7cf28c7ea00414586fbfa95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
GetComputerNameA
LoadLibraryA
FreeLibrary
SetPriorityClass
RemoveDirectoryA
GetFullPathNameA
CreateDirectoryA
CopyFileA
GlobalFree
GlobalAlloc
GetCurrentThreadId
GetStartupInfoA
CreateFileMappingA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetSystemInfo
GetTickCount
GetSystemDirectoryA
SetFileTime
CreateFileA
GetCurrentProcessId
GetStdHandle
MapViewOfFile
DeleteFileA
FreeResource
SizeofResource
LoadResource
FindResourceA
GetCommandLineA
SetErrorMode
GetModuleFileNameA
WriteFile
OpenProcess
TerminateProcess
GetExitCodeProcess
TerminateThread
ReadFile
Sleep
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindNextFileA
FindClose
GetLastError
FormatMessageA
GetModuleHandleA
UnmapViewOfFile
CreatePipe
GetCurrentProcess
DuplicateHandle
CloseHandle
CreateProcessA
GetWindowsDirectoryA
CreateSemaphoreA
GetVersionExA
HeapReAlloc
TlsSetValue
GetEnvironmentStrings
CompareStringW
CompareStringA
GetLocaleInfoW
GetLocaleInfoA
SetEndOfFile
SetEnvironmentVariableA
GetProcAddress
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
CreateThread
FreeEnvironmentStringsW
UnhandledExceptionFilter
FreeEnvironmentStringsA
SetLastError
TlsAlloc
GetCPInfo
GetEnvironmentStringsW
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
GetFileType
SetHandleCount
SetFilePointer
GetCurrentDirectoryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
ExitProcess
RtlUnwind
TlsGetValue
HeapFree
HeapAlloc
ResumeThread
GetSystemTime
ExitThread
GetTimeZoneInformation
MoveFileA
GetLocalTime
GetFileAttributesA
GetVersion

user32

IsWindow
MessageBoxA
SendMessageA
DefWindowProcA
PeekMessageA
UnhookWindowsHookEx
DestroyWindow
CallNextHookEx
PostThreadMessageA
CreateWindowExA
ExitWindowsEx
DispatchMessageA
GetMessageA
RegisterClassA
SetWindowsHookExA

gdi32

CreateDCA
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
GetDIBColorTable
DeleteObject
DeleteDC
GetDeviceCaps

wsock32

listen
WSAStartup
gethostbyname
htons
bind
sendto
recvfrom
connect
inet_ntoa
setsockopt
recv
send
WSAGetLastError
closesocket
socket
accept

mpr

WNetCloseEnum
WNetOpenEnumA
WNetEnumCachedPasswords
WNetAddConnectionA
WNetCancelConnectionA
WNetEnumResourceA

winmm

PlaySoundA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

svrapi

NetSessionEnum
NetShareEnum
NetShareDel
NetShareAdd

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
GetUserNameA

Sections

.text
Size: 54KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.D3R33K
Size: 5KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4272981cd7cf28c7ea00414586fbfa95

Headers

File Characteristics

Imports

kernel32

user32

gdi32

wsock32

mpr

winmm

avicap32

svrapi

advapi32

Sections

.text Size: 54KB - Virtual size: 132KB

.idata Size: 4KB - Virtual size: 8KB

.rsrc Size: 10KB - Virtual size: 12KB

.reloc Size: - Virtual size: 8KB

.D3R33K Size: 5KB - Virtual size: 52KB

.text
Size: 54KB - Virtual size: 132KB

.idata
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 10KB - Virtual size: 12KB

.reloc
Size: - Virtual size: 8KB

.D3R33K
Size: 5KB - Virtual size: 52KB