3f3e77a81a0492a9dead48c28c99f0fe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f3e77a81a0492a9dead48c28c99f0fe_JaffaCakes118
Size

312KB
MD5

3f3e77a81a0492a9dead48c28c99f0fe
SHA1

4998d80bd675bec001096968e6e6c4273a6212e4
SHA256

e46503a91b3cb59c290e08cdefee0729e28e70742b3cad4d19447946338517d7
SHA512

003012633efb63752e56401497deec74e6504c056e8c72442024fc0e1b350aeed4a804c090c8ab7b0b7bec701462584342ae7ce21d00deeae78d9ad2854618d9
SSDEEP

6144:XutI7lNvNfQPbd8QhSaeWNvztS8U51fBpiWDlMyNQ5s:mQlNvxQP2Q5vz88U5VBxpMyNGs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f3e77a81a0492a9dead48c28c99f0fe_JaffaCakes118

Files

3f3e77a81a0492a9dead48c28c99f0fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53addb543258a8fa7c7c04dbe3827b21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\em

Imports

kernel32

CloseHandle
GetCurrentThreadId
AllocConsole
GetThreadPriority
GlobalSize
FindResourceA
lstrcatA
GetWindowsDirectoryA
InterlockedDecrement
UnlockFile
GetEnvironmentStrings
GetCommandLineA
WriteConsoleA
GetLocaleInfoW
GetLastError
SetComputerNameW
ExitProcess
TransmitCommChar
InterlockedIncrement
ReadFile
UnhandledExceptionFilter
TlsAlloc
EnumCalendarInfoA
GetModuleHandleA
InitializeCriticalSection
SetLastError
WriteFile
GetVersionExA
WaitForMultipleObjects
VirtualFree
HeapReAlloc
HeapAlloc
LCMapStringW
VirtualQuery
CreateDirectoryExA
WriteProfileSectionW
EnterCriticalSection
GetThreadTimes
InterlockedExchange
GetStringTypeW
GetSystemTime
GetStdHandle
OutputDebugStringA
GetEnvironmentStringsW
GetCurrencyFormatW
GetUserDefaultLangID
MoveFileA
OpenMutexW
SetConsoleCursorInfo
FreeEnvironmentStringsW
MultiByteToWideChar
GlobalFix
GlobalUnfix
HeapDestroy
GetCurrentProcessId
WaitForDebugEvent
OpenMutexA
QueryPerformanceCounter
GetLocalTime
SetConsoleCtrlHandler
CompareStringA
GetProcAddress
GlobalFlags
GetDriveTypeA
GetExitCodeProcess
GetCPInfo
LocalCompact
HeapCreate
FlushFileBuffers
HeapFree
GetStartupInfoA
GetOEMCP
WaitCommEvent
GetACP
TlsFree
GetThreadContext
GetShortPathNameA
GetLogicalDrives
GetFileTime
CreateRemoteThread
EnumDateFormatsExW
GetStringTypeA
CreateProcessA
FreeEnvironmentStringsA
LCMapStringA
MoveFileExA
DeleteCriticalSection
GetModuleFileNameA
GetCurrentThread
TerminateProcess
IsBadWritePtr
ExpandEnvironmentStringsA
GetFileType
GetProcessHeaps
EnumSystemLocalesA
GetVersion
SetStdHandle
VirtualAlloc
SetEvent
GetTickCount
SetFilePointer
WideCharToMultiByte
GetSystemTimeAsFileTime
CreateMutexA
GlobalGetAtomNameW
SetHandleCount
MoveFileExW
RtlUnwind
SetEnvironmentVariableA
lstrcpynW
TlsSetValue
LoadLibraryA
GetCurrentProcess
OutputDebugStringW
DosDateTimeToFileTime
CompareStringW
SetTimeZoneInformation
LeaveCriticalSection
TlsGetValue
GetTimeZoneInformation

wininet

FindFirstUrlCacheEntryExW
GetUrlCacheConfigInfoA
InternetOpenUrlW
InternetSetDialStateA
CreateUrlCacheGroup
InternetWriteFileExA
DeleteIE3Cache
SetUrlCacheEntryGroup

user32

DefDlgProcW
GetUserObjectSecurity
SetWindowTextW
SetWindowPlacement
PaintDesktop
RemovePropA
LoadMenuA
DdeInitializeW
FreeDDElParam
GetKeyboardLayoutNameW
CharPrevExA
DdeQueryNextServer
BroadcastSystemMessageA
TranslateAcceleratorW
GetMenuInfo
OemKeyScan
LoadCursorA
PtInRect
TrackPopupMenuEx
GetClassLongW
CascadeChildWindows
BeginDeferWindowPos
DdeCreateStringHandleA
InsertMenuItemA
InSendMessageEx
GetForegroundWindow
VkKeyScanW
GetMenuDefaultItem
CreateMDIWindowW
SetWindowTextA
SetScrollRange
GetMenuCheckMarkDimensions
SetThreadDesktop
GetWindowModuleFileNameA
RegisterClipboardFormatA
DestroyCursor
GetClipboardSequenceNumber
RegisterDeviceNotificationW
DefMDIChildProcA
DdeClientTransaction
CreateDesktopA
GetUserObjectInformationW
RegisterClassExA
RegisterClassA
UnionRect
GetCapture

gdi32

SwapBuffers
FillPath
SetDIBits
CreateScalableFontResourceW
SetWindowExtEx
GetMiterLimit
ExtCreateRegion
EndDoc
GetGlyphOutlineA
CreateScalableFontResourceA
AnimatePalette
CancelDC
GetTextMetricsW
PlayEnhMetaFile
CloseFigure
GetEnhMetaFileDescriptionA
CreateRectRgn
CreateEllipticRgnIndirect
GetColorAdjustment
GdiGetBatchLimit

shell32

SHGetDesktopFolder

comctl32

ImageList_DrawIndirect
ImageList_Copy
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_Create
InitCommonControlsEx
ImageList_GetFlags
CreateUpDownControl
CreatePropertySheetPageA
ImageList_GetImageRect
MakeDragList

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53addb543258a8fa7c7c04dbe3827b21

Headers

File Characteristics

PDB Paths

Imports

kernel32

wininet

user32

gdi32

shell32

comctl32

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 96KB - Virtual size: 123KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 96KB - Virtual size: 123KB

.rsrc
Size: 8KB - Virtual size: 7KB