3cf80e3d630822bad08015a1db4428aa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3cf80e3d630822bad08015a1db4428aa_JaffaCakes118
Size

1.7MB
MD5

3cf80e3d630822bad08015a1db4428aa
SHA1

33496b2b768d7a48b5e377b1ccab748c28d042b8
SHA256

fe2ac70e2b5ec3e1eec980b404032f0dc5126bba4bab54b428567bf7515be49d
SHA512

c0702fd1426c078280a5e47f9e9bb91f249d29f1f299126284fe0ec87c700db1cf477d721d2a32217ad7090fd6b8fee9b1142a8665597f5d43bc614fe1dc05f0
SSDEEP

24576:9E2OMXjj5Af2Nb1gVY6sBe246ODYgxpNW82UKHP1UU+LAY2xnd/fko8AoEwe:9jhXj6ebH6p2+VlaVv1UHLAY+nd/fB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf80e3d630822bad08015a1db4428aa_JaffaCakes118

Files

3cf80e3d630822bad08015a1db4428aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c4a4fe69ac2c92a900dd12eb5bd261c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
WriteConsoleOutputW
FatalAppExitA
GetProcessHeap
QueryDosDeviceA
SuspendThread
WriteProcessMemory
GetLongPathNameA
lstrcmpiW
GetCommState
GetBinaryTypeA
GetCommandLineW
SetThreadAffinityMask
EndUpdateResourceA
LocalLock
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetFileInformationByHandle
EnumResourceNamesA
ScrollConsoleScreenBufferA
VirtualFree
GetTapeParameters
SetTimeZoneInformation
ExitProcess
FreeLibrary

user32

SendDlgItemMessageW
GetMenuItemCount
SetPropA
RegisterClassExW
BeginPaint
TranslateAcceleratorA
CheckRadioButton
GetMenuCheckMarkDimensions
CreateDialogParamW
ArrangeIconicWindows
PeekMessageW
EnumThreadWindows
CreateDialogIndirectParamA
WaitMessage
RegisterClipboardFormatA
PostThreadMessageA
MessageBoxA
WindowFromDC
GetSystemMenu
MapWindowPoints
GetDlgCtrlID
SetMenuItemInfoW
SendInput
CountClipboardFormats
DrawStateW
ShowCursor
GetNextDlgGroupItem
SetFocus
FindWindowW
GetCursorPos
SetMenuInfo

gdi32

GdiFlush
ExcludeClipRect
RealizePalette
PatBlt
GetWindowOrgEx
GetTextExtentExPointA
CreateDIBPatternBrushPt
GetClipRgn
CreateSolidBrush
DPtoLP

comdlg32

FindTextW

advapi32

OpenEventLogW
BuildTrusteeWithSidW
ReportEventW
DeleteAce
RegRestoreKeyW
CryptEncrypt
GetSecurityDescriptorOwner
SetKernelObjectSecurity
RegQueryInfoKeyA
CryptSetHashParam
QueryServiceObjectSecurity
GetSecurityDescriptorLength
RegQueryValueA
AddAccessAllowedAce
AccessCheckAndAuditAlarmA
RegEnumKeyA
ImpersonateLoggedOnUser
GetServiceDisplayNameA
RegSetValueExA
CryptAcquireContextA
RegCloseKey
LogonUserA
GetUserNameW
FreeSid
CloseServiceHandle
InitializeSid
StartServiceCtrlDispatcherW
ReadEventLogW
LookupPrivilegeDisplayNameA
GetSidSubAuthority
ClearEventLogW
CryptCreateHash
RegGetKeySecurity

shell32

SHChangeNotify

ole32

IIDFromString
CoTreatAsClass
CoLockObjectExternal
CoFileTimeNow
OleFlushClipboard
OleRegGetMiscStatus

oleaut32

SafeArrayGetElement
LoadTypeLibEx
SafeArrayPutElement
SetErrorInfo
SysStringLen
QueryPathOfRegTypeLi
SafeArrayCreate
LoadTypeLi
VariantChangeType

comctl32

PropertySheetW
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Create

shlwapi

PathUndecorateW
wnsprintfA
PathRemoveBackslashW
StrCmpIW
StrFormatByteSizeW
PathGetArgsW
SHRegCloseUSKey
StrCmpNIW
PathCommonPrefixW
StrStrA
StrTrimW
PathCompactPathW
SHRegGetUSValueW
SHSetThreadRef
PathIsRootW
StrRetToBufW
StrFormatKBSizeW
PathIsDirectoryW
StrFormatByteSizeA

Sections

.text
Size: 3KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c4a4fe69ac2c92a900dd12eb5bd261c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 3KB - Virtual size: 219KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 3KB - Virtual size: 219KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 17KB - Virtual size: 16KB