3c22cb6685bfa2e47e147e13c86dc30f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c22cb6685bfa2e47e147e13c86dc30f_JaffaCakes118
Size

324KB
MD5

3c22cb6685bfa2e47e147e13c86dc30f
SHA1

c2c6d512f624b7b42dbbd208b84286220f681162
SHA256

7cee2e2c409a0956054057e9e0533945cb940fd043ec2ffa15aa4da80bc978b1
SHA512

541cf1d1ac7989ff177895e6dc4154e2fc8e25f5e4c4fa883cce12a45e2175c0c68efa41bbf821d4eaffb6c93b90331b59eecc2c00ff136a97eaf4278ee6b47f
SSDEEP

6144:eEE4YDxmR0RJHmVMUXGsaRJSXj0TzvqA:Z4RJ5y9aaTSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c22cb6685bfa2e47e147e13c86dc30f_JaffaCakes118

Files

3c22cb6685bfa2e47e147e13c86dc30f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ed2f434210bf62dfa59d94f3673d211

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
IntersectRect
GetMenuItemCount
SetClipboardData
GetSysColorBrush
InvalidateRgn
EmptyClipboard
SetCaretPos
MessageBoxA
ValidateRect
FillRect
RegisterWindowMessageA
SetWindowTextA
RedrawWindow
RegisterClassExA
SetCapture
ScrollWindow
GetDesktopWindow
CreateMenu
BringWindowToTop
GetNextDlgTabItem
GrayStringA
IsWindowVisible
GetDCEx
EqualRect
ReleaseDC
GetClassLongA
RemoveMenu
EndPaint
GetDC
UpdateWindow
IsWindow
SetWindowPlacement
DeferWindowPos
GetMenu
MoveWindow
LoadMenuA
GetClassNameA
CreateDialogIndirectParamA
DrawFrameControl
GetKeyNameTextA
UnregisterClassA
GetWindowDC
EnableWindow
SetActiveWindow
SendMessageTimeoutA
MessageBeep
SetParent
RegisterClassA
RegisterClipboardFormatA
AdjustWindowRectEx
KillTimer
OpenClipboard
DrawFocusRect
DestroyCaret
BeginPaint
mouse_event
FindWindowA
GetSubMenu
SetMenuItemInfoA
EndDeferWindowPos
GetMenuStringA
WindowFromPoint
DestroyCursor
SetForegroundWindow
LoadBitmapA
FrameRect
GetForegroundWindow
ScreenToClient
ShowWindow
CopyIcon
CreateWindowExA
GetWindow
LoadCursorA
SendMessageA
CallNextHookEx
CharLowerA
DestroyAcceleratorTable
IsRectEmpty
DrawMenuBar
LoadIconA
DrawTextA
GetMenuCheckMarkDimensions
GetSystemMenu
IsWindowEnabled
DestroyIcon
CreateCaret
SetRectEmpty
CreatePopupMenu
GetFocus
ClientToScreen
GetMenuItemID
GetTopWindow
GetMessageTime
TabbedTextOutA
SetDlgItemTextA
PostQuitMessage
GetWindowThreadProcessId
EnumWindows
GetMessageA
LoadStringA
ReleaseCapture
EnumChildWindows
AppendMenuA
ModifyMenuA
InvalidateRect
UnhookWindowsHookEx
DefWindowProcA
ShowOwnedPopups
DestroyWindow
IsMenu
SetScrollInfo
GetActiveWindow
BeginDeferWindowPos
DrawTextExA
GetMenuState
GetClientRect
PostMessageA

winspool.drv

OpenPrinterA
ClosePrinter

kernel32

LCMapStringA
IsDebuggerPresent
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsAlloc
GetDateFormatA
GetTickCount
InterlockedIncrement
SetStdHandle
LCMapStringW
GetStringTypeW
HeapDestroy
FreeEnvironmentStringsA
WriteFile
SetUnhandledExceptionFilter
GetProcessHeap
GetLocaleInfoA
SetHandleCount
CompareStringA
GetLastError
GetProcAddress
WriteConsoleW
LeaveCriticalSection
GetConsoleCP
InterlockedExchange
CloseHandle
GetTimeFormatA
TlsGetValue
GetEnvironmentStringsW
FlushFileBuffers
IsValidCodePage
DeleteCriticalSection
VirtualAlloc
SetLastError
ReadFile
GetCurrentProcess
UnhandledExceptionFilter
VirtualQuery
GetCommandLineA
GetFileType
GetVersionExA
EnterCriticalSection
GetStringTypeA
Sleep
QueryPerformanceCounter
LoadLibraryA
GetOEMCP
CreateMutexA
GetCurrentThreadId
TerminateProcess
HeapFree
VirtualFree
GetCPInfo
CreateFileA
GetStdHandle
WideCharToMultiByte
RaiseException
InterlockedDecrement
FreeEnvironmentStringsW
HeapSize
WriteConsoleA
GetTimeZoneInformation
GetCurrentProcessId
SetFilePointer
TlsFree
GetConsoleOutputCP
GetStartupInfoA
GetConsoleMode
MultiByteToWideChar
HeapCreate
ExitProcess
HeapReAlloc
HeapAlloc
RtlUnwind
CompareStringW
GetACP
GetModuleHandleA
InitializeCriticalSection
TlsSetValue
GetEnvironmentStrings
SetEnvironmentVariableA

shell32

ShellExecuteA
ord155
SHFileOperationA

oleaut32

LoadTypeLi

wsock32

WSACleanup

advapi32

RegCloseKey
RegEnumKeyA
ControlService
RegCreateKeyExA
RegQueryValueExA

version

VerQueryValueA
GetFileVersionInfoSizeA

gdi32

GetDeviceCaps
StrokeAndFillPath
GetNearestPaletteIndex
SetWindowOrgEx
GetBitmapBits
OffsetViewportOrgEx
PatBlt
GetBoundsRect
GetPaletteEntries
SetRectRgn
CreateFontIndirectA
ExcludeClipRect
SelectClipRgn
ScaleViewportExtEx
SetMapMode
UnrealizeObject
Polygon
CreatePen
GetClipRgn
GetCharWidthA
CreateCompatibleDC
LPtoDP
FrameRgn
GetCurrentObject
CreateDCA
ExtCreateRegion
SaveDC
GetStockObject
CombineRgn
CreatePolygonRgn
GetViewportOrgEx
IntersectClipRect
LineTo
CreateFontA
SetPaletteEntries
Rectangle
EndPath
Pie
DeleteObject
GetViewportExtEx
CreateBitmap
SetPixelV
RestoreDC
SetBrushOrgEx
ExtFloodFill
ResetDCA
SetStretchBltMode
CreateICA
CreatePalette
GetTextMetricsA
GetRgnBox
Ellipse
SetROP2
BeginPath
GetClipBox
CreateRectRgnIndirect
ExtCreatePen
GetDIBits
GetTextExtentPointA
StartDocA
GetBkColor
GetWindowOrgEx
PtInRegion
OffsetRgn
GetObjectA
ScaleWindowExtEx
DPtoLP

comctl32

ImageList_Create
InitCommonControlsEx
ImageList_Draw
ImageList_Add

shlwapi

PathStripPathW
PathRemoveExtensionW
StrCmpIW
StrDupW

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ed2f434210bf62dfa59d94f3673d211

Headers

File Characteristics

Imports

user32

winspool.drv

kernel32

shell32

oleaut32

wsock32

advapi32

version

gdi32

comctl32

shlwapi

Sections

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 60KB - Virtual size: 75KB

.rsrc Size: 76KB - Virtual size: 75KB

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 60KB - Virtual size: 75KB

.rsrc
Size: 76KB - Virtual size: 75KB