3e786609c02a51ec44651ae7350308b7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e786609c02a51ec44651ae7350308b7_JaffaCakes118
Size

374KB
MD5

3e786609c02a51ec44651ae7350308b7
SHA1

af40b620189c94431497d639da657a360065ea69
SHA256

aef5ec2a94f88b0095202536af7240746aabcb1f0f56b3491763832300be6b71
SHA512

a43e4f56d52d4105b7aea48aee766f02c728d550b0b81c56efce04b303788abe3adf3441d97d8afc327a5776249c08dd8ccdeeacffd49c8e902de765a22f7396
SSDEEP

6144:hHyxtaHuB5lB6o7ZtwyZO+gIFdLCsL5PM2d91aL46kXnyQauEJ0v8yeTzOg+v:hHyx/5lHlZoIFdJRd9kM6k3yQauI0v8W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e786609c02a51ec44651ae7350308b7_JaffaCakes118

Files

3e786609c02a51ec44651ae7350308b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
free
_initterm
malloc
wcscmp
_except_handler3
_adjust_fdiv

gdi32

GetObjectW
SelectObject
CreateCompatibleDC
LineTo
MoveToEx
SetStretchBltMode
SetBrushOrgEx
RealizePalette
SelectPalette
CreateHalftonePalette
GetDeviceCaps
StretchBlt
CreateFontIndirectW
GetTextExtentPoint32W
SetLayout
SetTextColor
SetBkMode
CreateDIBSection
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
CreatePen
Rectangle
Arc
Ellipse
CreatePenIndirect
SetBkColor
SetROP2
GetStockObject
DeleteDC
DeleteObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GlobalAlloc
GlobalUnlock
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
FreeLibraryAndExitThread
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
ResetEvent
GetModuleFileNameW
GetWindowsDirectoryW
CreateMutexW
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
ReleaseMutex
CompareStringW
lstrcmpW
MoveFileW
CopyFileW
DeleteFileW
lstrcpynW
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
QueryPerformanceCounter
CreateEventW
CloseHandle
CreateThread
SetEvent
IsBadWritePtr
MultiByteToWideChar
lstrcpyW
lstrlenW
GetLastError
GetModuleHandleW
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
GlobalLock
LocalFree
LocalAlloc
ExitThread

ole32

CoUnmarshalInterface
CLSIDFromString
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
FreePropVariantArray
CoTaskMemAlloc
PropVariantClear
CoAllowSetForegroundWindow
CoUninitialize
CreateStreamOnHGlobal
CoInitialize

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shell32

SHGetFileInfoW
DragQueryFileW

shlwapi

StrFormatByteSizeW
wnsprintfA

user32

CharNextW
MessageBeep
SetWindowsHookExW
LoadAcceleratorsW
CopyAcceleratorTableW
CreateAcceleratorTableW
KillTimer
DestroyAcceleratorTable
UnhookWindowsHookEx
MessageBoxW
PostThreadMessageW
CallNextHookEx
IsChild
TranslateAcceleratorW
LoadIconW
GetKeyState
OffsetRect
IntersectRect
CopyRect
MoveWindow
IsRectEmpty
IsWindowVisible
PostMessageW
RegisterWindowMessageW
FrameRect
GetWindowTextLengthW
GetWindowTextW
DrawFocusRect
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
PtInRect
SendNotifyMessageW
SetTimer
MapWindowPoints
GetParent
SetDlgItemInt
ShowWindow
SetWindowTextW
GetFocus
SetFocus
GetSystemMetrics
LoadImageW
SetDlgItemTextW
SendDlgItemMessageW
CharUpperBuffW
EnableWindow
LoadCursorW
SetCursor
GetDlgItem
SendMessageW
EndDialog
GetWindowRect
GetDC
ReleaseDC
CopyIcon
RegisterClassW
GetWindowLongW
SetWindowLongW
DefWindowProcW
IsWindowEnabled
InvalidateRect
UpdateWindow
BeginPaint
GetClientRect
GetSysColorBrush
FillRect
EndPaint
DestroyIcon
LoadStringW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MapDialogRect
PostQuitMessage
DestroyWindow
EnableMenuItem
GetSystemMenu
SetForegroundWindow
DispatchMessageW
CharUpperW
TranslateMessage
IsDialogMessageW
GetMessageW
DialogBoxParamW
GetDlgItemInt
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
wsprintfW
GetIconInfo
FindWindowExW
SetWindowPos
GetMonitorInfoW
MonitorFromRect
GetDesktopWindow
IsWindow
DrawTextExW
InflateRect
DrawIconEx
GetSysColor
MonitorFromWindow
GetClassNameW
DrawTextW
WinHelpW
GetLastActivePopup
CreateWindowExW
CreateDialogParamW
RegisterClassExW

winmm

PlaySoundW

gdiplus

GdipCloneImage
GdipDrawImageRectRectI
GdipGetImageGraphicsContext
GdipSetImageAttributesThreshold
GdipSetImageAttributesColorMatrix
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree

msimg32

AlphaBlend

advapi32

RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AAAJ
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AAAS
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AAAA
Size: 342KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

ole32

oleaut32

shell32

shlwapi

user32

winmm

gdiplus

msimg32

advapi32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 8KB

.AAAJ Size: 512B - Virtual size: 4KB

.AAAS Size: 512B - Virtual size: 4KB

.AAAA Size: 342KB - Virtual size: 388KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 8KB

.AAAJ
Size: 512B - Virtual size: 4KB

.AAAS
Size: 512B - Virtual size: 4KB

.AAAA
Size: 342KB - Virtual size: 388KB

.rsrc
Size: 4KB - Virtual size: 3KB