3ce655d77d6673f3a20e52c92d1ad99a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3ce655d77d6673f3a20e52c92d1ad99a_JaffaCakes118
Size

604KB
MD5

3ce655d77d6673f3a20e52c92d1ad99a
SHA1

6078ccf4174296fb88bd584e0af6bef068022b2c
SHA256

53a76d2e66a90e20e805263e23399340aea0b7953c9bc912eab531859c33465c
SHA512

0016c6e502371541c23874eb7bd037086ecd564a8bf769d25e8a345b41bc28739461d5fe7ff130ff43ec28bb12ac798500cd460634e1c2a67b672ba9802b8be7
SSDEEP

12288:zpuS2+letyRFIAnyr/FWOI2xK84m04PHgsHVX:9uStetyRPn0vNK8FPAs1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ce655d77d6673f3a20e52c92d1ad99a_JaffaCakes118

Files

3ce655d77d6673f3a20e52c92d1ad99a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b44157311c435d2b1924a0adb6212f6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
WSACleanup
gethostbyname
htons
getsockname
recv
select
send
connect
socket
closesocket
ntohs
inet_addr
WSAGetLastError

kernel32

GlobalLock
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
MulDiv
GetCurrentThread
GlobalAlloc
SetThreadPriority
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpynA
GlobalFlags
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
SetErrorMode
FlushFileBuffers
SetEndOfFile
GlobalUnlock
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
IsBadReadPtr
GetStartupInfoA
GetSystemTimeAsFileTime
GetACP
TerminateProcess
ExitThread
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFree
LockResource
FindResourceA
LoadResource
LocalFree
CreateThread
lstrcatW
ReadFile
ReleaseMutex
SuspendThread
ResetEvent
ResumeThread
PulseEvent
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
OpenMutexA
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetVersionExA
CreateMutexA
WaitForMultipleObjects
SetEvent
CreateEventA
ExitProcess
SetFilePointer
WriteFile
GetEnvironmentStrings
GetEnvironmentVariableA
GetProcAddress
lstrlenW
GetFileAttributesA
IsBadWritePtr
SetLastError
GetLocaleInfoA
GetSystemDefaultLCID
lstrcmpiA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
GetShortPathNameA
SetFileAttributesA
DeleteFileA
CopyFileA
CreateFileA
RemoveDirectoryA
LoadLibraryA
FreeLibrary
CreateDirectoryA
FindNextFileA
FindFirstFileA
GetCommandLineA
CreateProcessA
GetModuleFileNameA
GetSystemDirectoryA
lstrcatA
FindClose
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetLastError
lstrcpyA
lstrcmpA
lstrlenA
Sleep
InterlockedExchange

user32

IsWindowVisible
CopyRect
ScreenToClient
AdjustWindowRectEx
SetFocus
GetFocus
DispatchMessageA
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
DestroyMenu
PtInRect
LoadCursorA
GetSysColorBrush
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowPos
UnregisterClassA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
GetParent
IsWindowEnabled
LoadStringA
ExitWindowsEx
GetForegroundWindow
GetDlgItem
SetWindowLongA
PeekMessageA
IsIconic
GetClientRect
DrawIcon
GetSystemMenu
EnableMenuItem
wsprintfA
GetWindowRect
GetSystemMetrics
MessageBeep
SetForegroundWindow
LoadIconA
SendMessageA
RegisterWindowMessageA
EnableWindow
MessageBoxA
EnumWindows
FindWindowExA
GetClassNameA
GetWindowTextA
PostMessageA
DestroyWindow
GetWindowLongA
SystemParametersInfoA

gdi32

SetTextColor
SetBkColor
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
RestoreDC
SaveDC
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DeleteDC
CreateBitmap
GetObjectA
SelectObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
FreeSid
RegFlushKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
RegOpenKeyA
RegCreateKeyExA
RegEnumKeyExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

comctl32

ord17

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 92KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b44157311c435d2b1924a0adb6212f6d

Headers

File Characteristics

Imports

wsock32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 336KB - Virtual size: 335KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 92KB - Virtual size: 123KB

.rsrc Size: 112KB - Virtual size: 111KB

.text
Size: 336KB - Virtual size: 335KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 92KB - Virtual size: 123KB

.rsrc
Size: 112KB - Virtual size: 111KB