3e30270cf7f9ebf027a1bdbd64ecd3ad_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3e30270cf7f9ebf027a1bdbd64ecd3ad_JaffaCakes118
Size

68KB
MD5

3e30270cf7f9ebf027a1bdbd64ecd3ad
SHA1

89b0018ae95d1c817f1d86cf2213d0326f3b3c7e
SHA256

3dd58f7d4448eb74d1a3fecd9426cd7b72695043ef59d79674a57cfc3d8f97bc
SHA512

defc3fd92f38e0a158111605e04f7dbcd9f731a9d15b8e569531a5a36c54f510dea05c5595c27274fffcec91841daae48b3eec7823301ef2765fd9eb129c4540
SSDEEP

768:RWwBmR2RGG/H+7umXry9meCIMCBD8loQEF249cedMMNr8mGHFr7GlhpZ0ayeyGkC:Rxm21+KmXG00BDUoHLldtoRFmlZjA7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e30270cf7f9ebf027a1bdbd64ecd3ad_JaffaCakes118

Files

3e30270cf7f9ebf027a1bdbd64ecd3ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

291e6d52b2cf87fae6534c36ab50a8a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetCurrentProcessId
LoadLibraryW
CreateEventW
CreateThread
GetCurrentThread
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetFilePointer
LocalAlloc
OutputDebugStringA
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
IsBadReadPtr
IsBadWritePtr
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
LCMapStringA
VirtualQuery
InterlockedExchange
IsBadCodePtr
GetSystemDefaultLCID
GetStringTypeA
LCMapStringW
LoadLibraryA
GetProcAddress
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
Sleep
SetLastError
GetCurrentProcess
CreateFileA
GetFileSize
CloseHandle
GetLastError
GetStdHandle
CreateMutexA
CreateEventA
GetVersionExA
IsDBCSLeadByte
CreateSemaphoreA

user32

SetCapture
UnregisterClassA
LoadBitmapA
DrawFocusRect
GetSysColorBrush
EnumChildWindows
SystemParametersInfoA
ScreenToClient
GetForegroundWindow
GetDesktopWindow
EnableMenuItem
ClientToScreen
CheckDlgButton
IsDlgButtonChecked
GetWindowLongA
InflateRect
LoadStringA
SendMessageA
MessageBoxA
DispatchMessageA
IsWindow
DestroyIcon
LoadImageW
GetSysColor
LoadIconA
LoadCursorA
SetWindowTextA
DefWindowProcA
InvalidateRect
ReleaseDC
SendMessageW
GetDC
EnableWindow
PostMessageA
CheckMenuItem
BeginPaint
EndPaint
GetParent
KillTimer
SetTimer
GetMessageW
ShowWindow
SetWindowLongW
LoadStringW
CharNextW
GetWindow
LoadCursorW
SetCursor

advapi32

AllocateAndInitializeSid
RegOpenKeyExW
RegQueryValueExA
OpenThreadToken
GetTokenInformation
RegOpenKeyExA
QueryServiceStatus
RegCreateKeyExA
RegCreateKeyW
GetSecurityDescriptorDacl
GetSidIdentifierAuthority
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteKeyA
LookupAccountSidA
IsValidSid
LsaQueryInformationPolicy
LsaFreeMemory
LsaClose
LsaOpenPolicy
RegCloseKey

ole32

StringFromGUID2
StringFromCLSID
CoTaskMemRealloc
CLSIDFromString
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance

setupapi

SetupRemoveFromSourceListA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

291e6d52b2cf87fae6534c36ab50a8a0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

setupapi

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 36KB - Virtual size: 2.0MB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 36KB - Virtual size: 2.0MB