3f9a2344c7a6f835c4bdeb3b24a34d0e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f9a2344c7a6f835c4bdeb3b24a34d0e_JaffaCakes118
Size

107KB
MD5

3f9a2344c7a6f835c4bdeb3b24a34d0e
SHA1

de9bd22453410e2728bab9b51afa7c11514a9c93
SHA256

2d16e9295e4d13506dcafc2030e453f88e24b91bc8e8da9c3b3f91a2de19d62f
SHA512

4c274abbd6b07ce27939109ff2be22c2b2f2826f63cbcf748e7a4f6c6b61cfda9a2de2668335efe8bc90be51ff90f8daa1796d17d5ed131340358e95f2f4f96c
SSDEEP

1536:81NOGrd+OpurpKqA2I5sM4jPJwRT1dMt3fF2CmneqjOTrfNVEsINZ1NnuME6Zcw:81Nf8OaA2ISjPJwRT0td2C2tsE2r6Zc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f9a2344c7a6f835c4bdeb3b24a34d0e_JaffaCakes118

Files

3f9a2344c7a6f835c4bdeb3b24a34d0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d34bea655061682b9aae986ef62ae33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GlobalLock
GetProcAddress
FreeLibrary
GlobalReAlloc
MulDiv
LocalLock
lstrcpyA
CreateFileA
WritePrivateProfileStringA
Sleep
LocalReAlloc
WriteFile
lstrlenA
GetTickCount
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
OutputDebugStringA
TlsGetValue
SetLastError
TlsAlloc
HeapAlloc
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
CloseHandle
CreateProcessA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
ResumeThread
GetWindowsDirectoryA
GetFileAttributesA
SetFileAttributesA
CopyFileA
GetShortPathNameA
GlobalAlloc
LocalFree
GetModuleFileNameA
GetOEMCP
GetACP
GlobalFree
GlobalHandle
GlobalUnlock
LocalAlloc
LocalUnlock
SetStdHandle
GetCPInfo
SetFilePointer
ReadFile
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
RtlUnwind
GetVersion
TerminateProcess
TlsSetValue
GetVersionExA
GetModuleHandleA
GetSystemPowerStatus
UnhandledExceptionFilter
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapFree

user32

EndPaint
ScreenToClient
MessageBoxA
CharNextA
FindWindowA
SetForegroundWindow
RegisterWindowMessageA
GetForegroundWindow
SendMessageA
GetParent
IsWindow
GetCursorPos
ReleaseDC
GetClientRect
GetDC
PeekMessageA
GetQueueStatus
wsprintfA
SystemParametersInfoA
PostMessageA
SetTimer
EnableWindow
GetWindowTextA
EndDialog
PostQuitMessage
SendDlgItemMessageA
SetWindowTextA
GetDlgItem
ShowWindow
BeginPaint
GetWindowRect
GetSystemMetrics
RegisterClassA
SetFocus
LoadCursorA
SetCursor
DefWindowProcA
LoadIconA
DialogBoxParamA
KillTimer
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
FillRect

gdi32

SetTextColor
CreateSolidBrush
GetDeviceCaps
CreateHalftonePalette
SelectPalette
RealizePalette
StretchDIBits
SetStretchBltMode
SetBrushOrgEx
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
SetBkMode
GetStockObject
GetClipBox

comdlg32

GetSaveFileNameA

advapi32

RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA

shell32

ShellExecuteA

winmm

mciSendStringA
mmioInstallIOProcA
midiStreamClose
midiOutUnprepareHeader
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutReset
midiStreamRestart
midiStreamPause
midiStreamStop
midiStreamPosition
mmioClose
mmioRead
mmioSeek
mmioDescend
mmioOpenA

comctl32

InitCommonControlsEx

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d34bea655061682b9aae986ef62ae33

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

winmm

comctl32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 3.4MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 3.4MB

.rsrc
Size: 8KB - Virtual size: 6KB