3b96b00afd5cd111d164ffe43c57216d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b96b00afd5cd111d164ffe43c57216d_JaffaCakes118
Size

176KB
MD5

3b96b00afd5cd111d164ffe43c57216d
SHA1

0f2752e98aa839c0875af6a5821d835bead1f96d
SHA256

408441961e6f356c90984361671e3dde4417584e4c43278a5bfe559b25882ad0
SHA512

fb7fc2d8764a506ea1ab3e18155fba9d284d4b2a26b441e355e77e71887e8fbc450a582d020eaed069a341b3c878549cae783d6815b5b6484c10ad099096f7f7
SSDEEP

1536:5i7iUk6Va0vwZzRXk1OJjV5OcI/j6/ju2yjEoXJKXX0JSkRxWMSC7jGN0W:5idkoa8usOxTBI/j6/aBI8uiSiZjGqW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b96b00afd5cd111d164ffe43c57216d_JaffaCakes118

Files

3b96b00afd5cd111d164ffe43c57216d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

235e4caf15754b2c090efe8bf5146912

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
SetEnvironmentVariableA
InitializeCriticalSection
HeapAlloc
GetStdHandle
GetUserDefaultLCID
GetVersionExA
VirtualFree
LoadLibraryA
FindClose
GetLocaleInfoA
IsValidLocale
LCMapStringW
lstrcpynA
GetLocalTime
GetFileAttributesA
FileTimeToSystemTime
GetDriveTypeA
GetSystemTime
GetStringTypeW
HeapFree
ReleaseMutex
GetLocaleInfoW
GetUserDefaultUILanguage
lstrlenA
GetModuleFileNameA
WaitForSingleObject
GetModuleHandleExW
SetConsoleMode
GetShortPathNameA
SetVolumeLabelA
LocalUnlock
CreateMutexA
GetCurrentProcess
SetConsoleCtrlHandler
ExitProcess
WideCharToMultiByte
GetFileTime
GetConsoleMode
GetFileType
SetHandleCount
IsValidCodePage
InterlockedExchange
GetEnvironmentVariableA
FindFirstFileA
CompareStringW
HeapDestroy
GetProcAddress
GetConsoleScreenBufferInfo
SetStdHandle
HeapCreate
LeaveCriticalSection
GetFullPathNameA
GetStringTypeA
VirtualAlloc
GetTimeZoneInformation
GetModuleHandleA
LCMapStringA
GetDriveTypeA
CompareStringA
GetStartupInfoA
SetThreadPriorityBoost
GetProcessHeap
GlobalFlags
CreateFileA
FindNextFileA
lstrcmpiA
FindVolumeClose
GetVolumeInformationA
EnumSystemLocalesA

shlwapi

SHDeleteValueA
PathFileExistsW
PathRemoveBackslashA

shell32

SHGetSpecialFolderPathW
ShellExecuteExA
ExtractIconExA

ole32

OleUninitialize
CoCreateInstance
OleInitialize

urlmon

CreateURLMoniker

user32

EnableWindow
GetParent
DrawTextA
CharPrevA
SystemParametersInfoA
DestroyWindow
LoadIconA
GetDlgItem
RegisterClassA
GetWindowTextA
PostQuitMessage
LoadBitmapA
EndDialog
CharNextA
GetDlgItemTextA
ScreenToClient
LoadCursorA
FillRect
SendDlgItemMessageA
SetRect
BeginPaint
IsWindowVisible
SetDlgItemTextA
CreateDialogParamA
GetWindowRect
SetWindowPos
EndPaint
SetClassLongA
GetDesktopWindow
GetClientRect

gdi32

IntersectClipRect
SelectObject
SetBkColor
CreatePen
OffsetClipRgn
GetClipRgn
GetNearestColor
SetTextColor
GetStockObject
CreateRectRgn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zzlenhn
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yvwpskp
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nqmgqhx
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

futjjbu
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jhqmfgw
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

djjznqn
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

owptywq
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ebqezct
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wyfrlyh
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

235e4caf15754b2c090efe8bf5146912

Headers

File Characteristics

Imports

kernel32

shlwapi

shell32

ole32

urlmon

user32

gdi32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 35KB

.rsrc Size: 2KB - Virtual size: 1KB

.rdata Size: 160KB - Virtual size: 208KB

zzlenhn Size: - Virtual size: 52KB

yvwpskp Size: - Virtual size: 52KB

nqmgqhx Size: - Virtual size: 32KB

futjjbu Size: - Virtual size: 32KB

jhqmfgw Size: - Virtual size: 32KB

djjznqn Size: - Virtual size: 52KB

owptywq Size: - Virtual size: 52KB

ebqezct Size: - Virtual size: 52KB

wyfrlyh Size: - Virtual size: 1.3MB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 35KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rdata
Size: 160KB - Virtual size: 208KB

zzlenhn
Size: - Virtual size: 52KB

yvwpskp
Size: - Virtual size: 52KB

nqmgqhx
Size: - Virtual size: 32KB

futjjbu
Size: - Virtual size: 32KB

jhqmfgw
Size: - Virtual size: 32KB

djjznqn
Size: - Virtual size: 52KB

owptywq
Size: - Virtual size: 52KB

ebqezct
Size: - Virtual size: 52KB

wyfrlyh
Size: - Virtual size: 1.3MB