3e272e4704171392e97a9dc1fbc69479_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e272e4704171392e97a9dc1fbc69479_JaffaCakes118
Size

171KB
MD5

3e272e4704171392e97a9dc1fbc69479
SHA1

e42c97768345480021539f00009473dad2f17df6
SHA256

0c8c7dac9f655495baea2b08bbbe62fb7449756a36ceea19f01d3045cacac85c
SHA512

b4a7734c15e8d638d55df02e2645644357fa9efba6bd90a4bb83982cbfc45ef5c569a3d5426598d802025c8cb30d0073e21557ec1e284ef4f40766a45f7300c6
SSDEEP

3072:7Jqo0iouhViSQxU6gPtiV3yx7+jP+q/3xzoZaBZfDUEXu:t0iRViHxcPtiZy1+jWuxsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e272e4704171392e97a9dc1fbc69479_JaffaCakes118

Files

3e272e4704171392e97a9dc1fbc69479_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10d2b2a79f1cd8b037181eea41b56312

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowScrollBar
DefWindowProcW
FrameRect
GetDC
GetParent
SetCapture
GetWindowRect
KillTimer
SetCursor
ReleaseCapture
GetDesktopWindow
SetForegroundWindow
SetWindowLongW
IntersectRect
GetSysColor
GetActiveWindow
GetSystemMetrics
FillRect
SendMessageW
BringWindowToTop
UnionRect
LoadCursorW
DrawTextW
EqualRect
GetCursorPos
SetTimer
CreatePopupMenu
CopyRect
PostMessageW
ReleaseDC
SetFocus
ClientToScreen
wsprintfW
GetWindowLongW
ScreenToClient
DestroyMenu
IsRectEmpty
GetClientRect
IsWindowVisible
DrawFocusRect
FindWindowExW
UpdateWindow
PtInRect
EnableWindow
TrackPopupMenuEx
SetRectEmpty
IsWindow
OffsetRect
SetRect
LoadImageW
GetSysColorBrush
InflateRect
InvalidateRect

avifil32

AVISaveOptions
AVIMakeCompressedStream

advapi32

RegCreateKeyW
RegCloseKey
RegSetValueExW
RegSetValueW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW

shell32

DragQueryFileW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW

kernel32

InterlockedExchange
DisableThreadLibraryCalls
GetThreadLocale
WaitForMultipleObjectsEx
MulDiv
GetLastError
FindNextChangeNotification
GetSystemTimeAsFileTime
lstrlenW
GetVersionExW
GlobalAlloc
FileTimeToLocalFileTime
InitializeCriticalSection
GetProcessId
lstrcpynW
GetProcAddress
GlobalLock
CreateThread
GetCurrentProcessId
InterlockedDecrement
MultiByteToWideChar
QueryPerformanceCounter
SetEvent
EnterCriticalSection
GlobalUnlock
LeaveCriticalSection
EnumResourceTypesW
FindClose
GetTickCount
InterlockedIncrement
FindCloseChangeNotification
GetModuleFileNameA
GetDriveTypeW
ExitProcess
FileTimeToSystemTime
CreateEventW
GetFullPathNameW
FindFirstChangeNotificationW
WideCharToMultiByte
WaitForSingleObject
GetACP
FindFirstFileW
lstrlenA
DeleteCriticalSection
FreeLibrary
ResetEvent
GetLocaleInfoA
GetCurrentThreadId
CloseHandle
GetModuleHandleW
GlobalReAlloc
Sleep
GetVersionExA

ole32

CoFreeUnusedLibraries
OleUninitialize
StringFromGUID2
CoUninitialize
CoCreateInstance
OleInitialize
CoInitialize

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10d2b2a79f1cd8b037181eea41b56312

Headers

File Characteristics

Imports

user32

avifil32

advapi32

shell32

kernel32

ole32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 70KB - Virtual size: 69KB

.tls Size: 1024B - Virtual size: 256KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 70KB - Virtual size: 69KB

.tls
Size: 1024B - Virtual size: 256KB