3cceb2261e9f9915687738ccfc9a19e7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3cceb2261e9f9915687738ccfc9a19e7_JaffaCakes118
Size

197KB
MD5

3cceb2261e9f9915687738ccfc9a19e7
SHA1

b535700e3ccc3c85f25fb86a407e091c5915264b
SHA256

f1027a8ce507b864f2ae2c6b70b86920373751296563872babd9767fbb059fc7
SHA512

e21d5e0dbdcbdcd914f3ea245146b43246215ee2494246306832e5c2b67e398e8faa2a63eabd29a7b26425e6c901a0f8c26250fabe0b96aa8decab499934aeec
SSDEEP

3072:UW3KldyX7//Q+F873cQ2h94M596orPkhVxUYRfM4I+MykkO6qZJ2oZ5SIg:UyRDQcqvm94M58orMhjUwtDMykLt+Ig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cceb2261e9f9915687738ccfc9a19e7_JaffaCakes118

Files

3cceb2261e9f9915687738ccfc9a19e7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1f3ff57cad16b9436be2e81bd45178f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
CloseHandle
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameA
WaitForSingleObject
WritePrivateProfileStringA
GlobalFlags
GlobalAddAtomA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
VirtualFree
HeapCreate
GetStdHandle
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
lstrlenA
GetLastError
CreateEventA
SetLastError
WinExec
GetModuleFileNameA
Sleep
GetModuleHandleA
GetComputerNameA
FindResourceA
LoadResource
LockResource
SizeofResource
GetCurrentProcessId
WideCharToMultiByte

user32

GetClassInfoExA
CreateWindowExA
GetClientRect
SetForegroundWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
DestroyMenu
IsIconic
GetWindowPlacement
SetWindowPos
ShowWindow
SetWindowLongA
IsWindow
DefWindowProcA
GetClassInfoA
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
ClientToScreen
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
CharUpperA
GetSystemMetrics
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
LoadStringA
SetTimer
GetMessageA
DispatchMessageA
CallWindowProcA
GetMenu
RegisterClassA
AdjustWindowRectEx
CopyRect
GetDlgItem
SystemParametersInfoA
GrayStringA

advapi32

RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
InitializeSecurityDescriptor
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
SetSecurityDescriptorDacl

shell32

ShellExecuteA

shlwapi

PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecA

oleacc

LresultFromObject
CreateStdAccessibleObject

wininet

InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
HttpEndRequestA
InternetQueryDataAvailable
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpAddRequestHeadersA
InternetSetStatusCallback

gdi32

SaveDC
RestoreDC
SetBkColor
CreateBitmap
SetTextColor
SetMapMode
GetClipBox
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetDeviceCaps
DeleteDC
GetStockObject
SetViewportOrgEx

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f3ff57cad16b9436be2e81bd45178f8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

oleacc

wininet

gdi32

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 151KB - Virtual size: 150KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 1024B - Virtual size: 576B

.text
Size: 151KB - Virtual size: 150KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 1024B - Virtual size: 576B