3bf53f45609fb4a2329b8b0191504871_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3bf53f45609fb4a2329b8b0191504871_JaffaCakes118
Size

2.3MB
MD5

3bf53f45609fb4a2329b8b0191504871
SHA1

690ead8807e3389cd00d5aaa5193ae782f479ca3
SHA256

d7b26a2a9813fb5d16976a4e589a46706da94d44b7bf0a0e3f51a84ea20833f4
SHA512

9acc047d8fd84574e014880fb11e147e97d292a9d1b5b121a62b352c619ba47e6974693b8ea45b3bcbbb44586b172eb28846646d7d8a03f2fcc4687cb6418c26
SSDEEP

12288:a9Y917SuqUfS70PcIBFlsNpZaHHhY/BQH/1sW2re63iODXUp3VwdwmZGxKEyEnzJ:a4vqUfo0PZ8mY+H2/u2lBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf53f45609fb4a2329b8b0191504871_JaffaCakes118

Files

3bf53f45609fb4a2329b8b0191504871_JaffaCakes118
.dll windows:4 windows x86 arch:x86

42bfe68615830317b7c53fdc84d1c2d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mmioDescend
mmioOpenA
mmioClose
mmioSeek
mmioRead
mmioGetInfo
mmioAscend
timeGetTime
sndPlaySoundA

kernel32

HeapAlloc
HeapFree
IsBadReadPtr
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetCurrentDirectoryA
GetDriveTypeA
CreateDirectoryA
GetCommandLineA
ExitProcess
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
HeapSize
TerminateProcess
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
RtlUnwind
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
UnhandledExceptionFilter
VirtualProtect
GetSystemInfo
VirtualQuery
IsBadCodePtr
GetExitCodeProcess
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
GetFileTime
GetFileAttributesA
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
WritePrivateProfileStringA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CreateEventA
ReleaseMutex
CreateMutexA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
InterlockedDecrement
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetModuleHandleA
lstrcmpA
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
RaiseException
LocalAlloc
CreateProcessA
CloseHandle
GetModuleFileNameA
GetCurrentThreadId
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetLastError
FormatMessageA
LocalFree
FreeLibrary
Sleep
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualFree

user32

ShowOwnedPopups
SetCursor
LoadAcceleratorsA
InsertMenuItemA
SetRectEmpty
SetMenu
RedrawWindow
TranslateAcceleratorA
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
EnableMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
PostQuitMessage
TrackPopupMenu
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
wsprintfA
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuState
KillTimer
SetTimer
UpdateWindow
CopyRect
GetMenu
ModifyMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetParent
SetCapture
GetWindowRect
GetCursorPos
ReleaseCapture
SetRect
DrawIconEx
ScreenToClient
LoadStringA
CharUpperA
GetDC
WindowFromPoint
GetMessageA
TranslateMessage
ValidateRect
ReleaseDC
LoadImageA
MessageBoxA
DrawFocusRect
DrawFrameControl
GetSystemMetrics
SendMessageA
InflateRect
PostMessageA
GetSysColorBrush
FillRect
CreatePopupMenu
GetKeyState
GetMenuItemInfoA
LoadMenuA
DestroyMenu
UnpackDDElParam
ScrollWindow
ReuseDDElParam
GetCapture
InvalidateRect
CheckMenuItem
AppendMenuA
LoadIconA
LoadCursorA
GetClientRect
PtInRect
EqualRect
EnableWindow
UnionRect
OffsetRect
IsRectEmpty
GetSysColor
IsWindowVisible

gdi32

RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
SelectPalette
CreateSolidBrush
PtVisible
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetBkMode
SetBkColor
RestoreDC
SaveDC
Rectangle
EnumFontFamiliesA
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
DPtoLP
GetStockObject
SetPixel
BitBlt
SelectObject
CreateCompatibleDC
GetTextExtentPoint32A
Polygon
Polyline
CreatePen
CreateFontIndirectA
CreateDIBSection
SetPixelV
GetPixel
GetViewportOrgEx
RealizePalette
GetDeviceCaps
CreateHalftonePalette
GetObjectA
CreateCompatibleBitmap
GetBitmapBits
SetBitmapBits
CreateBitmap
CreateHatchBrush
IntersectClipRect

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

shell32

DragFinish
DragQueryFileA

comctl32

ord8
ord17
ImageList_Destroy
ImageList_Draw
ImageList_GetImageInfo

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

CoUninitialize
CoInitialize

oleaut32

VariantInit
VariantChangeType
VariantClear

Exports

Exports

main

Sections

.text
Size: 1008KB - Virtual size: 1006KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42bfe68615830317b7c53fdc84d1c2d4

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 1008KB - Virtual size: 1006KB

.rdata Size: 260KB - Virtual size: 258KB

.data Size: 36KB - Virtual size: 55KB

.rsrc Size: 892KB - Virtual size: 891KB

.reloc Size: 112KB - Virtual size: 108KB

.text
Size: 1008KB - Virtual size: 1006KB

.rdata
Size: 260KB - Virtual size: 258KB

.data
Size: 36KB - Virtual size: 55KB

.rsrc
Size: 892KB - Virtual size: 891KB

.reloc
Size: 112KB - Virtual size: 108KB