3f24f9c0022ec2e4c6a338ff76f27f2d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3f24f9c0022ec2e4c6a338ff76f27f2d_JaffaCakes118
Size

97KB
MD5

3f24f9c0022ec2e4c6a338ff76f27f2d
SHA1

91b1b153683498d68b5deb014de85f4ff501005c
SHA256

23858040d19b789b146b3c76eec6505e33f597b27d9b0d49129c128c1a099777
SHA512

3caa206603bfc3f3454281801ff4f2eea75fa7dec3e61cd2f4dcb1b6f2c26b1ec3b0a833af04c498e17d91d2dfb47c6b3c80168e674e87ae8a8b1caa731ca681
SSDEEP

3072:LR36ke1NyLsp/w96ef8/UHnenrd2lAtO4PmQf:FKZNF/v5UH24itO4Pp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f24f9c0022ec2e4c6a338ff76f27f2d_JaffaCakes118

Files

3f24f9c0022ec2e4c6a338ff76f27f2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47954b40735259cfea508f41718ef692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegCreateKeyExA
RegCreateKeyExW
RegEnumValueA
RegEnumValueW
RegOpenKeyA
RegOpenKeyW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegSetValueExA
RegEnumKeyExW
RegCloseKey

kernel32

LeaveCriticalSection
GetProcAddress
HeapDestroy
GetLastError
LoadResource
SizeofResource
lstrlenA
FreeLibrary
EnterCriticalSection
InterlockedIncrement
GetCommandLineW
GetCurrentThreadId
InitializeCriticalSection
Sleep
DeleteCriticalSection
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
SetEvent
GetStartupInfoW
lstrcatW
LoadLibraryExW
CreateMutexW
CreateMutexA
GetShortPathNameA
LoadLibraryExA
LoadLibraryA
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
FindResourceW
FindResourceA
CreateEventW
CreateEventA
SetLastError
LoadLibraryW
DeleteFileW
IsBadWritePtr
GetShortPathNameW
lstrcpyW
FreeLibraryAndExitThread
WideCharToMultiByte
CreateFileW
GetTempFileNameW
GetTempPathW
WriteFile
lstrcmpiA
lstrcmpiW
GlobalLock
GlobalUnlock
GetVersionExA
lstrlenW
MultiByteToWideChar

ole32

CoRegisterClassObject
CoRevokeClassObject
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoResumeClassObjects
ReleaseStgMedium
CoCreateInstance
CoSuspendClassObjects

oleaut32

VarUI4FromStr
SysAllocString
RegisterTypeLi
LoadTypeLi
SysFreeString

shlwapi

StrRetToBufW

shell32

ShellExecuteExW
SHGetDesktopFolder
DragQueryFileW

msvcrt

_purecall
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
memmove
_wsplitpath
wcslen
_wcslwr
free
realloc
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z

user32

GetWindow
IsWindowVisible
GetWindowThreadProcessId
GetDesktopWindow
GetParent
ShowWindow
IsIconic
SetForegroundWindow
SendMessageTimeoutA
SendMessageA
CharNextW
PostThreadMessageW
PostThreadMessageA
FindWindowW
RegisterClipboardFormatW
RegisterWindowMessageA
GetMessageA
DispatchMessageA
DispatchMessageW
FindWindowA
GetMessageW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

47954b40735259cfea508f41718ef692

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

shlwapi

shell32

msvcrt

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 32KB - Virtual size: 28KB

Size: 21KB - Virtual size: 21KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 32KB - Virtual size: 28KB