3b64ba55aee687c0c0573f03cede21a0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b64ba55aee687c0c0573f03cede21a0_JaffaCakes118
Size

201KB
MD5

3b64ba55aee687c0c0573f03cede21a0
SHA1

deeb9767dd5db6e15df561428ed0c9b1d0a07821
SHA256

5a275129e3437874cd1cf6c6cd1fa98c59fea2663f713f328c6a26f384668bb2
SHA512

5d3067cbba086b240ca9ae012d57ca79678c18f91944b2102ee25ea8e9f089bb6f998fa49f1441dee7e5770a83d27f1cabe58287edc71914435f4041e2e4a3e9
SSDEEP

3072:Zkv+pIH2jPJcgOvEtwC68twjIqfu+WXhUZrazHecpuI6pVA1X+czkoa6wOhadSCK:sa+gO8tu8tw8bp6OvYujfh0SHlunIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b64ba55aee687c0c0573f03cede21a0_JaffaCakes118

Files

3b64ba55aee687c0c0573f03cede21a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0dee6128400ce4967b64af3c8f2d5189

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeaps
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetSystemDirectoryA
CreateDirectoryW
GetModuleHandleA
GetCurrentProcessId
GlobalDeleteAtom
WriteFile
lstrcmpA
CopyFileA
LocalAlloc
SetComputerNameW
SetLastError
GetFullPathNameA
GetCPInfo
GetStartupInfoW
GetExitCodeProcess
GetExpandedNameW
CreateNamedPipeA
GetVersionExA
GetProcAddress
OpenMutexA
IsBadStringPtrW
lstrcpynW
EnumCalendarInfoW
SearchPathW
lstrcmpiW
GetUserDefaultLangID
Sleep
GetProcessHeap
lstrcatA
BeginUpdateResourceW
DeleteAtom
CreateFileA
GlobalFindAtomW
GetExitCodeThread

user32

GetCapture
SetWindowTextW
GetMenuItemRect
MessageBoxW
GetCursorPos
GetAsyncKeyState
MonitorFromRect
CallWindowProcA
ArrangeIconicWindows
CloseWindow
CharUpperA
BringWindowToTop
GetSysColor
RegisterClassExW
GetClassInfoExA
GetDC
DefWindowProcW
MessageBoxIndirectA
MoveWindow
GetForegroundWindow
PeekMessageA
LoadIconW
GetDlgItem
MonitorFromWindow
EnumDesktopsA
CharPrevW
ShowCaret
GetCaretPos

gdi32

GetGraphicsMode
SetRectRgn
GetEnhMetaFileA
CreateMetaFileA
CreateFontIndirectExW
GetEnhMetaFilePaletteEntries
GetOutlineTextMetricsW
ScaleViewportExtEx
BeginPath
GetCharWidthW
DeleteEnhMetaFile
SetStretchBltMode

advapi32

RegOpenKeyW
RegFlushKey
RegEnumValueA
RegCreateKeyExW
RegOpenKeyA
RegQueryValueA
RegRestoreKeyW

shell32

StrNCmpIW
ShellExecuteExA
StrNCmpA

oleaut32

VarDecSub
VarI1FromDec
VarUI1FromR4
VarI4FromR4
VarR8FromI4
VarI1FromStr
DllRegisterServer

version

GetFileVersionInfoW
VerInstallFileA
VerFindFileA

urlmon

CreateFormatEnumerator
CDLGetLongPathNameA
CoInternetQueryInfo
IsAsyncMoniker
URLDownloadToFileW
GetSoftwareUpdateInfo
URLDownloadA
Extract
IsLoggingEnabledA
CopyStgMedium

crypt32

CertSetCTLContextProperty
CryptMsgVerifyCountersignatureEncoded
CertUnregisterPhysicalStore
CryptExportPublicKeyInfo
CertSaveStore
CryptRegisterOIDInfo
I_CryptAllocTls
CryptSIPVerifyIndirectData
CryptMsgEncodeAndSignCTL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.IcbOWV
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fwV
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CgwTKx
Size: 1024B - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zR
Size: 1024B - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZKF
Size: 1024B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rkacex
Size: 2KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0dee6128400ce4967b64af3c8f2d5189

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

version

urlmon

crypt32

Sections

.text Size: 12KB - Virtual size: 12KB

.IcbOWV Size: 2KB - Virtual size: 9KB

.fwV Size: 3KB - Virtual size: 14KB

.CgwTKx Size: 1024B - Virtual size: 23KB

.data Size: 5KB - Virtual size: 4KB

.zR Size: 1024B - Virtual size: 30KB

.ZKF Size: 1024B - Virtual size: 31KB

.Rkacex Size: 2KB - Virtual size: 269KB

.rsrc Size: 170KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.IcbOWV
Size: 2KB - Virtual size: 9KB

.fwV
Size: 3KB - Virtual size: 14KB

.CgwTKx
Size: 1024B - Virtual size: 23KB

.data
Size: 5KB - Virtual size: 4KB

.zR
Size: 1024B - Virtual size: 30KB

.ZKF
Size: 1024B - Virtual size: 31KB

.Rkacex
Size: 2KB - Virtual size: 269KB

.rsrc
Size: 170KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB