3f034ccf86d4782f486616ce4bd3c82f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f034ccf86d4782f486616ce4bd3c82f_JaffaCakes118
Size

352KB
MD5

3f034ccf86d4782f486616ce4bd3c82f
SHA1

7ce0e44d9af5ca376e11aa6787d182c17d5f9c41
SHA256

45489b4bc6f8a7a85f44f3f8945b7febcf40878f1def2a0501d2c801f9bbe99c
SHA512

e849e64b6633fa5aa85bf7db779a5e321ec961b37eed35b57fd168fb44dc80d60c2fa07089b4995a2eac04eb1dbff31b2b838e4d0c9d82ea20b175788be3c0f8
SSDEEP

6144:R3KSJaNzBtLzRoSMjOnSZYmrcveXL6+2EFZ/CX/OE9oGqgIwhjpkCOye:XgvRK9hlF3FZORy3wBpkC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f034ccf86d4782f486616ce4bd3c82f_JaffaCakes118

Files

3f034ccf86d4782f486616ce4bd3c82f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9642af9aeeb93701d6544723e62d6626

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindCloseChangeNotification
TryEnterCriticalSection
GetThreadPriority
GlobalGetAtomNameW
LoadLibraryExW
lstrcatW
VirtualAllocEx
DosDateTimeToFileTime
DeleteFiber
OpenSemaphoreW
ExitProcess
EnumResourceNamesW
GetCompressedFileSizeW
SwitchToFiber
GetCommandLineA
VirtualFree
GetThreadContext
SetThreadPriorityBoost
UnmapViewOfFile
WritePrivateProfileStringW
VirtualUnlock
IsValidLocale
lstrcmpA
EnumSystemCodePagesW
LoadResource
GetStartupInfoA
IsDBCSLeadByteEx
WritePrivateProfileSectionW
GlobalDeleteAtom
EndUpdateResourceA
CompareStringW
RemoveDirectoryW
GetOEMCP
SearchPathW
GetACP
Beep
SetMailslotInfo
GetFileAttributesA
SetCurrentDirectoryA
LocalReAlloc
FileTimeToLocalFileTime
SetThreadAffinityMask
SetConsoleActiveScreenBuffer
GlobalReAlloc
GetCommState
LocalSize
GetBinaryTypeA
GetLocaleInfoW
WriteConsoleOutputCharacterA
GetTempPathW
SetTimeZoneInformation
GetDriveTypeA
CreateDirectoryExA
SetConsoleMode
QueryDosDeviceA
FindNextChangeNotification
CreateFileW
GetVersionExA
FlushFileBuffers
VirtualProtect

user32

SetWindowLongA
GetGuiResources
SetMessageQueue
SetMenuInfo
BroadcastSystemMessageW
PtInRect
WinHelpA
GetKeyboardLayoutNameW
TabbedTextOutW
GetClassInfoExA
UnloadKeyboardLayout
RemoveMenu
SetCapture
FindWindowExA
GetDesktopWindow
CallNextHookEx
OemToCharA
ChangeMenuW
DestroyCaret
GetKeyNameTextW
NotifyWinEvent
IsCharAlphaNumericA
IsWindowVisible
DialogBoxIndirectParamW
MapVirtualKeyExW
GetClipboardViewer
CreatePopupMenu
SetMenuItemInfoA
DrawTextW
GetAncestor
EndPaint
DrawMenuBar
DrawAnimatedRects
OemToCharBuffW
SendMessageW
CharNextW
GetUserObjectInformationW
CharPrevW
EnumDisplaySettingsExW
DispatchMessageA
FlashWindowEx
CascadeWindows
wsprintfW
LoadAcceleratorsA
ToAscii
SetClipboardViewer
GetClassNameW
SetLastErrorEx
MessageBoxW
SetClipboardData
EnumDisplayDevicesA
DrawStateW
GetScrollBarInfo
TranslateMessage
IsRectEmpty
ShowOwnedPopups
IsChild
SetSysColors
VkKeyScanW
InSendMessage
BringWindowToTop
GetUpdateRgn
GetMessageA
OpenClipboard
UnhookWinEvent
EnableWindow

gdi32

SelectClipPath
GetCharWidth32W

comdlg32

ReplaceTextW
PageSetupDlgW
PrintDlgA
GetOpenFileNameA

advapi32

AllocateAndInitializeSid
RegQueryValueA
EnumDependentServicesW
LookupPrivilegeValueW
OpenProcessToken
RegEnumValueW
GetSecurityDescriptorLength
GetUserNameW
BuildSecurityDescriptorW
CryptDestroyHash
GetServiceDisplayNameW
CopySid
RegDeleteKeyA
StartServiceCtrlDispatcherA
BuildTrusteeWithNameW
RegSetValueExA
ImpersonateSelf
AdjustTokenPrivileges
AccessCheck
QueryServiceConfigW
GetSecurityInfo
EqualSid
RegSetValueW
CryptSetHashParam
OpenServiceA
GetUserNameA
RegSaveKeyW
InitializeAcl
LockServiceDatabase
SetThreadToken
GetExplicitEntriesFromAclW
RegLoadKeyA
LookupPrivilegeDisplayNameA
LogonUserW
SetSecurityDescriptorOwner
RegDeleteValueA
AddAce
GetAce

shell32

ExtractIconExW
DragAcceptFiles
SHFileOperationW

ole32

OleCreateMenuDescriptor
CoImpersonateClient
CoReleaseServerProcess

oleaut32

SafeArrayGetElement
VariantChangeType
VariantCopy
LoadTypeLibEx
QueryPathOfRegTypeLi

comctl32

ImageList_GetIconSize
ImageList_BeginDrag

shlwapi

SHSetValueA
StrPBrkW
StrToIntExW
PathIsUNCW
SHEnumValueW
SHRegOpenUSKeyW
PathRelativePathToA
PathCombineW
PathRemoveBlanksA
PathAddBackslashA
PathRemoveBackslashA
SHRegGetUSValueW
PathCommonPrefixW
PathQuoteSpacesW

setupapi

SetupGetTargetPathW

Sections

.text
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9642af9aeeb93701d6544723e62d6626

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

setupapi

Sections

.text Size: 332KB - Virtual size: 330KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 6KB

.text
Size: 332KB - Virtual size: 330KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 6KB