3e1067ad8a1bbfc11f21fc336d1f5c5a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e1067ad8a1bbfc11f21fc336d1f5c5a_JaffaCakes118
Size

273KB
MD5

3e1067ad8a1bbfc11f21fc336d1f5c5a
SHA1

56d0a0a74ea50779414554c1c66e0732c0614c38
SHA256

d9feff698a6486041a620e1203e0c57348f5a196eed367d238e2eb21039a860a
SHA512

a64013a88d8855f192666655a225f1dace90f4e17941164de0f13babc436e67b3bc37bc7515b51d428fc64c224866665e1e7b76938f2d70d7db5b2fc686c47ae
SSDEEP

3072:AyeJU/unU3o0dQWDZ1oI5jHn2zc1fu0uwad2zKcWZI5P4Upa7zLXjgK7y+1u:oW/ZjCEZ1QcY0uw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1067ad8a1bbfc11f21fc336d1f5c5a_JaffaCakes118

Files

3e1067ad8a1bbfc11f21fc336d1f5c5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56988266927b7ed0fa2f9cad42f5d7fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
SetFilePointer
LoadResource
FindResourceA
GlobalUnlock
CopyFileA
SetEndOfFile
WinExec
SetCurrentDirectoryA
MulDiv
RemoveDirectoryA
MultiByteToWideChar
MoveFileA
WritePrivateProfileStringA
LockResource
GetPrivateProfileStringA
GetDriveTypeA
DeleteFileA
GetShortPathNameA
GetTempFileNameA
MoveFileExA
WaitForSingleObject
ExitThread
GetWindowsDirectoryA
lstrcatA
ResetEvent
SetEvent
lstrcpyA
lstrlenA
CreateDirectoryA
GetLastError
CreateEventA
CreateThread
WriteFile
GetTickCount
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleFileNameA
GetSystemDirectoryA
GetCurrentProcess
GetVersionExA
FreeLibrary
LoadLibraryA
GetProcAddress
lstrcmpA
lstrcmpiA
FindFirstFileA
GetLogicalDrives
FindNextFileA
FindClose
lstrcpynA
GetVolumeInformationA
GetSystemDefaultLangID
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
WideCharToMultiByte
CloseHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
VirtualFree
HeapFree
RtlUnwind
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

LoadStringA
DefWindowProcA
ScreenToClient
BeginPaint
GetWindowLongA
EndPaint
GetClientRect
MapWindowPoints
MessageBoxA
GetWindowTextA
MoveWindow
GetDlgItemTextA
EnableWindow
CheckDlgButton
GetDlgItem
SetWindowTextA
UpdateWindow
PostMessageA
GetParent
SendDlgItemMessageA
DestroyWindow
CreateDialogParamA
IsDlgButtonChecked
SendMessageA
DrawFocusRect
FillRect
GetSysColor
EndDialog
DialogBoxParamA
SetDlgItemTextA
GetWindowRect
SetWindowPos
DispatchMessageA
PeekMessageA
TranslateMessage
CharUpperBuffA
IsWindowEnabled
wsprintfA
SystemParametersInfoA
ExitWindowsEx
GetDC
ReleaseDC
InvalidateRect
PostQuitMessage
ShowWindow
DefDlgProcA
LoadCursorA
RegisterClassA
UnregisterClassA
FindWindowA
SetWindowLongA
IsDialogMessageA
GetSystemMetrics
GetMessageA
LoadBitmapA
CharUpperA
CreateWindowExA
GetForegroundWindow
SetForegroundWindow

gdi32

DeleteObject
TextOutA
SetBkMode
CreateFontIndirectA
GetTextMetricsA
SetTextColor
SelectObject
SetDIBitsToDevice
RealizePalette
SetBkColor
CreatePalette
DeleteDC
SelectPalette
BitBlt
CreateCompatibleBitmap
CreateBitmap
GetDeviceCaps
CreateDCA
CreateCompatibleDC
CreateSolidBrush
GetObjectA

advapi32

RegDeleteKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
CloseServiceHandle
RegEnumKeyExA
RegDeleteValueA
StartServiceA
OpenServiceA
OpenSCManagerA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

OleInitialize
CoCreateInstance
OleUninitialize

comctl32

ord17

lz32

LZOpenFileA
LZCopy
LZClose

winmm

mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerSetControlDetails
mixerGetControlDetailsA
mixerClose

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56988266927b7ed0fa2f9cad42f5d7fc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

lz32

winmm

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 232KB - Virtual size: 228KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 232KB - Virtual size: 228KB