3b69235dfa45871e457ae10229669b71_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3b69235dfa45871e457ae10229669b71_JaffaCakes118
Size

140KB
MD5

3b69235dfa45871e457ae10229669b71
SHA1

e757932e00f87bbc04e4d067e7945036814c38b7
SHA256

daf7e6e9943548be72d901030fad68a48a6c084361ded8f8e1e0d9d293b874fc
SHA512

58db74d9b27d3a177fd9e5d237ef25df66d0b6d57b87711b75355a0bcf92aaee371f8e4c6794b376032c8fd09465bdb9ff1c58d8e11a93fc01fbd9fe4381422c
SSDEEP

3072:qmgXnerrrestc1MCaUuh5hr4I7C/FEQyO9S4DPG:qZMtCbuh52Ie/FEB4DO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b69235dfa45871e457ae10229669b71_JaffaCakes118

Files

3b69235dfa45871e457ae10229669b71_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d22b86140503c9f60459804cdbaeb06a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
VirtualProtect
SetEndOfFile
CreateFileA
VirtualFree
MultiByteToWideChar
GetPrivateProfileStringA
VirtualAlloc
GetTempFileNameW
InterlockedDecrement
WriteConsoleOutputCharacterW
GetProcAddress
GetStartupInfoA
GetModuleHandleW
GetCurrentProcessId
LoadLibraryW
OutputDebugStringA
VerifyVersionInfoW
lstrcmpA
WriteConsoleOutputW
DeleteVolumeMountPointW
FindNextFileW
SetFilePointer
FileTimeToLocalFileTime
ExitThread
LocalAlloc
LCMapStringW
GetModuleHandleA

msvcrt

fflush
_ftol
wcslen
wcschr
_wcsicmp
__getmainargs
wcsncat
_snwprintf
wcsrchr
wcscat
swscanf
malloc
exit
__p__commode
calloc
memset
_adjust_fdiv
__initenv
_wcsnicmp
time
toupper
strpbrk
_purecall
__dllonexit

user32

MsgWaitForMultipleObjects
GetWindowTextLengthW
SetProcessWindowStation
PostThreadMessageW
LoadCursorA
DispatchMessageW
SetDlgItemTextA
CharNextW
SetCursor
SetActiveWindow
UnhookWindowsHookEx
SetRectEmpty
GetDlgItemInt
GetKeyState
DrawMenuBar
DialogBoxParamW
PostQuitMessage
SetWindowLongW
DestroyMenu
SetCapture
SystemParametersInfoW
PtInRect
GetWindowLongA
IsWindowEnabled
DefWindowProcW

gdi32

SetBkColor
CreateRoundRectRgn
GetRegionData
SetPixel
SaveDC
BitBlt
SetWindowExtEx
CreateSolidBrush
SetStretchBltMode
CreateCompatibleDC
GetDeviceCaps
GetStockObject
GetObjectW
MoveToEx
StretchBlt
SelectPalette
CreateFontIndirectW
CreatePalette

tapi32

phoneGetDisplay
MMCGetProviderList
lineAddProvider
lineInitializeExW
lineGetID
lineUnparkA
lineSetupConferenceA
lineGetProviderListW
lineDrop
phoneConfigDialogA
lineSetAgentSessionState
lineSetAgentStateEx
lineAddProviderA
lineGetDevConfigW
lineSetLineDevStatus

Exports

Exports

GetFullDescInfo
ProvidePath

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d22b86140503c9f60459804cdbaeb06a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

tapi32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 36B

.data Size: 50KB - Virtual size: 50KB

.edata Size: 39KB - Virtual size: 38KB

.rsrc Size: 34KB - Virtual size: 33KB

.reloc Size: 512B - Virtual size: 108B

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 36B

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 39KB - Virtual size: 38KB

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 512B - Virtual size: 108B