3b68348a30da5e3df6b870e843dc3d35_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b68348a30da5e3df6b870e843dc3d35_JaffaCakes118
Size

357KB
MD5

3b68348a30da5e3df6b870e843dc3d35
SHA1

6717f1c1eab3fe08a69fe15fa156f4cfa42c13c5
SHA256

f41ad45ccec4a32206a09248447369f5838768d998b1f51ee4c651fbef0da445
SHA512

57872d7f2b65826e4e4dc4993ee407ae173544dfb9e9b7a43f880b796826502acd266b3d5474ee624c7d77f3d8424e1b15168f8d53ed5a24468a0336ef008689
SSDEEP

6144:labrGSgBmqYUolsvHgKA8eLJyikHz8yJxoVYkzO0AhMFuKaeEXJHqdWgXk5a7WIP:a0UqpolX8e0ikaT/VgeEXJHWXx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b68348a30da5e3df6b870e843dc3d35_JaffaCakes118

Files

3b68348a30da5e3df6b870e843dc3d35_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7df0d91cc3c4202609b6d1f97b8c684d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

browsewm.pdb

Imports

msvcrt

strcmp
_snprintf
sprintf
memcpy
_vsnprintf
strrchr
wcsncpy
_wcsicmp
wcsstr
_except_handler3
_adjust_fdiv
malloc
memmove
_initterm
memset
free
_snwprintf

advapi32

ChangeServiceConfigW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegCloseKey
RegOpenKeyW
CloseServiceHandle
StartServiceW
ChangeServiceConfig2W
CreateServiceW
OpenServiceW
OpenSCManagerW
RegDeleteValueW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegCreateKeyW
RegCreateKeyExW
RegSetValueExA
RegCreateKeyA
RegSetValueW
RegCreateKeyExA

gdi32

BitBlt
DeleteDC
ExtCreatePen
GetDeviceCaps
CreateDCW
AddFontResourceA
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
CreatePen
CreateSolidBrush
SelectObject
CreateFontIndirectW

kernel32

GetModuleHandleA
lstrcatW
FindResourceA
GetSystemDirectoryW
FreeLibrary
GetProcAddress
GetUserDefaultUILanguage
LoadLibraryA
GetLastError
Sleep
WaitForSingleObject
GetSystemDefaultUILanguage
LocalFree
CreateSemaphoreA
CloseHandle
LCMapStringW
InterlockedExchange
CreateEventW
ReleaseMutex
CompareStringW
EnterCriticalSection
GlobalMemoryStatusEx
GetPrivateProfileStringW
GetWindowsDirectoryW
GetThreadLocale
GetACP
GlobalFree
CreateProcessW
GetCommandLineA
ResetEvent
DeleteFileW
lstrcmpiW
lstrcmpW
MultiByteToWideChar
GetVersion
GetConsoleOutputCP
TlsAlloc
lstrcpyA
CreateThread
ReadFile
GetStdHandle
GetComputerNameW
CompareStringA
FormatMessageW
lstrcpynW
PulseEvent
DisableThreadLibraryCalls
QueryPerformanceCounter
OpenSemaphoreA
FindAtomA
GetTempPathA
GetTickCount
DeleteFileA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
TlsFree
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
OpenEventA
lstrlenA
AddAtomA
lstrlenW
lstrcpyW
OpenEventW
SetLastError
LocalAlloc
GetModuleHandleW
InterlockedIncrement
GetModuleFileNameW
WriteFile
HeapFree
CreateMutexA
FindResourceW
FindNextFileA
HeapAlloc
GetComputerNameExW
GetTempFileNameA
GetVersionExA
GetProcessHeap
HeapCreate
SetEvent
SetFilePointer
GetSystemDefaultLangID
FlushFileBuffers
SetFilePointerEx
SetFileAttributesA
LeaveCriticalSection
CreateFileA
WaitForSingleObjectEx
GetStartupInfoA
GlobalAlloc
ExpandEnvironmentStringsA
GetLocalTime
GetModuleFileNameA
GetAtomNameA
lstrcpynA
CreateMutexW

user32

FindWindowA
FindWindowW
CountClipboardFormats
UnregisterClassA
SetForegroundWindow
GetProcessDefaultLayout
wsprintfW
ReleaseDC
ShowWindow
UpdateWindow
SetWindowTextW
LoadIconA
SystemParametersInfoW
SendMessageA
GetInputState
MessageBoxW
LoadCursorA
LoadIconW
GetDesktopWindow
SetDlgItemTextW
GetCursor
SendDlgItemMessageW
FindWindowExA
TranslateMessage
GetSysColor
DefWindowProcA
GetDlgItem
GetCaretBlinkTime
GetFocus
SetFocus
PostQuitMessage
LoadStringW
CharNextW
DispatchMessageA
LoadMenuA
GetDoubleClickTime
GetForegroundWindow
GetMessageA
IsWindow
GetWindowLongW
SetWindowLongW
GetClipboardSequenceNumber
GetParent
GetDC
SendMessageW
GetActiveWindow

ole32

CoInitialize
CoUninitialize
CoCreateInstance

cfgmgr32

CM_Get_DevNode_Status

setupapi

SetupDefaultQueueCallbackW
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiRegisterDeviceInfo
SetupCloseInfFile
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiGetSelectedDevice
SetupQueryInfVersionInformationW
SetupGetInfInformationW
SetupDiGetDriverInstallParamsW
SetupDiEnumDriverInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiClassGuidsFromNameW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInterfaceRegKey
SetupDiEnumDeviceInterfaces
SetupDiSetClassInstallParamsW
SetupDiGetClassInstallParamsW
SetupDiGetWizardPage
SetupDiCallClassInstaller
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoW
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoList
SetupDiRemoveDevice
SetupDiDeleteDevRegKey
SetupDiRemoveDeviceInterface
SetupDiDeleteDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailW
SetupFindNextLine
SetupDiCreateDeviceInterfaceRegKeyW
SetupOpenAppendInfFileW
SetupDiCreateDeviceInterfaceW
SetupTermDefaultQueueCallback
SetupDiInstallDevice
SetupInitDefaultQueueCallbackEx
SetupDiCreateDevRegKeyW
SetupDiSetDriverInstallParamsW

shell32

SHGetFolderPathW

mscms

InstallColorProfileW
AssociateColorProfileWithDeviceW

Sections

.text
Size: 63KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7df0d91cc3c4202609b6d1f97b8c684d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

gdi32

kernel32

user32

ole32

cfgmgr32

setupapi

shell32

mscms

Sections

.text Size: 63KB - Virtual size: 61KB

.data Size: 257KB - Virtual size: 260KB

.bss Size: - Virtual size: 14KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 63KB - Virtual size: 61KB

.data
Size: 257KB - Virtual size: 260KB

.bss
Size: - Virtual size: 14KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 3KB - Virtual size: 3KB