3f061ed4bf37a3c092a240b86e43a839_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f061ed4bf37a3c092a240b86e43a839_JaffaCakes118
Size

250KB
MD5

3f061ed4bf37a3c092a240b86e43a839
SHA1

12125f205899b72b0a3f91d566409fe2ddf2e5c4
SHA256

252465fd2cab32bb62a025d4420b821fd4ae4dec9ecac040369d739ea6f27279
SHA512

3273c487698f8a7038f28a0e9a6fe6c8f58a83af3820fed8f1c6bd0404e776e3145ef2a0c566153e4f32a1bcf20ccddd9b41387252df253fa20915d1217459f3
SSDEEP

6144:xcjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:aiuZ6Bq1aMWqBTSV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f061ed4bf37a3c092a240b86e43a839_JaffaCakes118

Files

3f061ed4bf37a3c092a240b86e43a839_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
CreateEventW
OpenEventW
CloseHandle
FreeLibrary
GetPriorityClass
lstrcpynW
ResetEvent
WaitForMultipleObjects
CreateDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
LocalFree
SetErrorMode
WideCharToMultiByte
OutputDebugStringW
GetModuleHandleW
CreateProcessW
OpenProcess
WaitForSingleObject
SetProcessWorkingSetSize
MulDiv
CreateFileW
DeleteFileW
SetFileAttributesW
WriteFile
LoadLibraryExW
DeviceIoControl
ExpandEnvironmentStringsA
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
SetUnhandledExceptionFilter
PulseEvent
GetLocalTime
GetProcAddress

user32

LoadStringW
KillTimer
PostMessageW
GetSubMenu
SetForegroundWindow
LoadMenuW
AppendMenuW
GetCursorPos
CreatePopupMenu
GetMenuItemCount
RemoveMenu
SetMenuDefaultItem
GetClientRect
RedrawWindow
SetWindowPos
IsWindowVisible
GetDlgCtrlID
GetWindowRect
GetParent
GetDC
ReleaseDC
TranslateAcceleratorW
EnableWindow
SetTimer
PostQuitMessage
RegisterWindowMessageW
LoadImageW
LoadIconW
SendMessageW
UpdateWindow
GetForegroundWindow

gdi32

CreatePatternBrush
DeleteObject
GetObjectW
GetPixel
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
RealizePalette
BitBlt
GetDIBColorTable
CreateHalftonePalette
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
CreatePalette

advapi32

RegOpenKeyExA
RegQueryValueExA
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
CloseServiceHandle
SetEntriesInAclW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW

shell32

Shell_NotifyIconW
ShellExecuteW

msoert2

PszAllocA

iaspolcy

DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aeN
Size: 1024B - Virtual size: 1005B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uJm
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qQn
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wkrcoE
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SfH
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oCs
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iaQU
Size: 512B - Virtual size: 805B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Xij
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.F
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XSOpU
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ac02522db7668811dd224a0577fb68a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msoert2

iaspolcy

Sections

.text Size: 17KB - Virtual size: 16KB

.aeN Size: 1024B - Virtual size: 1005B

.uJm Size: 1KB - Virtual size: 1KB

.rdata Size: 3KB - Virtual size: 2KB

.qQn Size: 512B - Virtual size: 329B

.wkrcoE Size: 1KB - Virtual size: 2KB

.SfH Size: 1KB - Virtual size: 1KB

.oCs Size: 1024B - Virtual size: 1KB

.iaQU Size: 512B - Virtual size: 805B

.data Size: 213KB - Virtual size: 255KB

.Xij Size: 1KB - Virtual size: 2KB

.F Size: 1024B - Virtual size: 1KB

.XSOpU Size: 2KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 17KB - Virtual size: 16KB

.aeN
Size: 1024B - Virtual size: 1005B

.uJm
Size: 1KB - Virtual size: 1KB

.rdata
Size: 3KB - Virtual size: 2KB

.qQn
Size: 512B - Virtual size: 329B

.wkrcoE
Size: 1KB - Virtual size: 2KB

.SfH
Size: 1KB - Virtual size: 1KB

.oCs
Size: 1024B - Virtual size: 1KB

.iaQU
Size: 512B - Virtual size: 805B

.data
Size: 213KB - Virtual size: 255KB

.Xij
Size: 1KB - Virtual size: 2KB

.F
Size: 1024B - Virtual size: 1KB

.XSOpU
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 3KB