3c1edca1431944cd99e7ac438a4cfd13_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c1edca1431944cd99e7ac438a4cfd13_JaffaCakes118
Size

946KB
MD5

3c1edca1431944cd99e7ac438a4cfd13
SHA1

3e4fbf08efb924c3b4fa1161f4f7c89e76cf8fb2
SHA256

a2656475bcb385d5d605e59a849bfae5ec525ffd6ff457139d0d775a36ca24f7
SHA512

7546569d2e5e5876ac93e56df99f0295806f85c111686afeff346b6709f59be0e9206e1a0134d13a37245ebc57b6be707ef9e00f65d475ca962720ff4bcb7081
SSDEEP

24576:gRl+ZvQIfz336IvZYnPWPW3RRSDjSUv/Rr:ocQG33RvK4WzUnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c1edca1431944cd99e7ac438a4cfd13_JaffaCakes118

Files

3c1edca1431944cd99e7ac438a4cfd13_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2bf3bc8e4ff37a2007b750d83824e217

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

ICSendMessage
ICCompressorChoose

userenv

UnloadUserProfile

wininet

InternetCreateUrlW
InternetCrackUrlW
InternetCombineUrlW

ntdll

RtlUnwind
VerSetConditionMask

user32

DefDlgProcW
RegisterWindowMessageW
EnumChildWindows
CreateDialogIndirectParamW
GetClassLongW
TrackMouseEvent
GetFocus
RegisterClassExW
GetScrollInfo
SetScrollInfo
IntersectRect
InvalidateRect
PtInRect
UpdateWindow
IsWindowEnabled
KillTimer
GetKeyState
GetNextDlgTabItem
CreateAcceleratorTableW
GetMessageW
TranslateAcceleratorW
IsDialogMessageW
DestroyAcceleratorTable
GetLayeredWindowAttributes
SetLayeredWindowAttributes
EnableWindow
LoadCursorW
SetCursor
PostMessageW
DefWindowProcW
IsWindowVisible
ShowWindow
GetWindowTextLengthW
GetWindowTextW
GetClassNameW
GetDesktopWindow
IsWindow
DrawIconEx
CopyRect
GetSysColor
MessageBoxIndirectW
BeginPaint
EndPaint
RedrawWindow
MessageBeep
SetWindowLongW
SetWindowTextW
FillRect
InflateRect
AdjustWindowRectEx
SetWindowPos
GetSystemMetrics
DrawTextW
LoadIconW
MapWindowPoints
ScreenToClient
WindowFromPoint
GetDCEx
SetWindowRgn
GetWindowThreadProcessId
GetShellWindow
PostThreadMessageW
MsgWaitForMultipleObjects
GetSystemMenu
EnableMenuItem
CreateWindowExW
GetWindowLongW
SetRect
DestroyWindow
LoadStringW
SetFocus
SendMessageW
ReleaseDC
GetDC
PostQuitMessage
SetProcessDefaultLayout
EndDialog
GetWindowRect
SystemParametersInfoW
DialogBoxIndirectParamW
CharNextW
NotifyWinEvent
GetClientRect
GetParent
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
PeekMessageW
UnregisterClassA

sensapi

IsNetworkAlive

secur32

GetUserNameExW

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrustEx

kernel32

OpenProcess
GetTempPathA
GetFullPathNameA
DeleteFileA
SetFilePointer
CreateFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetTempPathW
GetLocalTime
GetFullPathNameW
ReadFile
QueueUserWorkItem
MulDiv
GetUserDefaultLangID
QueueUserAPC
InterlockedCompareExchange
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
CreateEventW
SetEvent
CreateMutexW
OpenMutexW
LocalAlloc
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
GetFileAttributesW
CreateDirectoryW
GetPrivateProfileStringW
WaitForSingleObject
ReleaseMutex
FlushFileBuffers
WritePrivateProfileStringW
CreateFileW
DeviceIoControl
CloseHandle
DeleteFileW
GetTempFileNameW
FindNextFileW
FindFirstFileW
FindClose
GetLongPathNameW
FileTimeToSystemTime
SetThreadPriority
EnumResourceNamesW
GetSystemInfo
VerifyVersionInfoW
ExpandEnvironmentStringsW
FindResourceExW
CompareStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
HeapSize
Sleep
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
WriteConsoleW
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetThreadPriority
ExitThread
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateThread
GetStartupInfoA
LockResource
CompareStringW
GetModuleHandleW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
HeapSetInformation
GetModuleFileNameW
LoadLibraryExW
lstrcmpiW
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
lstrlenW
FreeLibrary
FormatMessageW
GetLastError
LocalFree
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile

uxtheme

SetWindowTheme

Sections

.text
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hexe
Size: 13KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bf3bc8e4ff37a2007b750d83824e217

Headers

File Characteristics

Imports

msvfw32

userenv

wininet

ntdll

user32

sensapi

secur32

wintrust

kernel32

uxtheme

Sections

.text Size: 548KB - Virtual size: 547KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 377KB - Virtual size: 376KB

.hexe Size: 13KB - Virtual size: 3.3MB

.text
Size: 548KB - Virtual size: 547KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 377KB - Virtual size: 376KB

.hexe
Size: 13KB - Virtual size: 3.3MB