b3fb634388376368bc7acf9c3f0af3ec_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b3fb634388376368bc7acf9c3f0af3ec_JaffaCakes118
Size

122KB
MD5

b3fb634388376368bc7acf9c3f0af3ec
SHA1

30fbe4c880ff1312c8f1c88f447d96442b531d30
SHA256

cd6dbe05ddaa20e0863b8bb36290b30099b3ef30e51330bc8cb14a913ebc89e1
SHA512

332e7cfe98491f8fdbebd6dc5f099ff8b9c55a1b560f28595261d2f4672de5b6cc05656a675f88ccccb67884f5a1cec9555130a92637c31c05d81d005848f647
SSDEEP

3072:RoFjPiPlqVLxU5SCkzGqZCgu9++kxoyKoAT4a:iF+qVLxMSdzTXuzF0IH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PerfWatch.exe

Files

b3fb634388376368bc7acf9c3f0af3ec_JaffaCakes118
.rar
PerfWatch.exe
.exe windows:4 windows x86 arch:x86

68dbbdfe51ed584bacf396d8b3372f95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

Beep
GetSystemDefaultLangID
GetUserDefaultLangID
ExitProcess
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
CreateEventA
CreateSemaphoreA
GetCurrentThreadId
SetPriorityClass
OpenProcess
ResumeThread
CreateThread
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
SetFileAttributesA
CreateFileA
ReadFile
DeviceIoControl
FindClose
FindFirstFileA
GetFileTime
SetFileTime
MoveFileA
GetLargestConsoleWindowSize
SetLastError
GetFileSize
SetEndOfFile
DeleteFileA
GetExitCodeProcess
CreateProcessA
FreeEnvironmentStringsA
CreateDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
CopyFileA
GetTempPathA
GetTempFileNameA
SetConsoleTitleA
GetConsoleTitleA
ReadConsoleInputA
PeekConsoleInputA
GetSystemTime
GetLocalTime
GetTimeZoneInformation
FindNextFileA
ExpandEnvironmentStringsA
SetErrorMode
MultiByteToWideChar
SetConsoleScreenBufferSize
SetConsoleWindowInfo
GetConsoleScreenBufferInfo
CreateFileMappingA
MapViewOfFile
GetSystemInfo
IsBadReadPtr
GetStdHandle
WriteFile
WaitForSingleObject
GetCurrentProcessId
SetEvent
CloseHandle
UnmapViewOfFile
OutputDebugStringA
GetVersion
GetModuleFileNameA
Sleep
GetTickCount
GetEnvironmentVariableA
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
SetFilePointer
MulDiv

user32

SetCursor
FindWindowA
wsprintfA
DestroyWindow
UpdateWindow
CreateDialogIndirectParamA
SystemParametersInfoA
ScreenToClient
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
TranslateMDISysAccel
GetClassInfoA
DefWindowProcA
DefMDIChildProcA
ReleaseCapture
SetCapture
GetParent
WindowFromPoint
GetCursorPos
DrawTextA
GetClassLongA
PtInRect
GetWindowRect
GetWindow
IsWindow
EnumChildWindows
GetMessageA
LoadBitmapA
LoadAcceleratorsA
InsertMenuA
CreateMenu
DestroyMenu
GetSubMenu
WinHelpA
EndDialog
SetFocus
MessageBoxA
GetSystemMetrics
SetWindowPos
SetTimer
LoadCursorA
RegisterClassA
GetWindowLongA
SetWindowLongA
SetActiveWindow
LoadIconA
GetKeyState
IsIconic
ShowWindow
KillTimer
PostQuitMessage
SetWindowPlacement
CreateWindowExA
MoveWindow
SendMessageA
GetWindowPlacement
FillRect
InvalidateRect
BeginPaint
GetClientRect
EndPaint
GetDesktopWindow
GetDC
ReleaseDC
DialogBoxIndirectParamA

gdi32

SetBkColor
GetObjectA
TextOutA
SetTextColor
DeleteDC
BitBlt
CreateBrushIndirect
CreateFontA
MoveToEx
LineTo
CreatePen
SelectObject
GetTextExtentPointA
DeleteObject
GetDeviceCaps
CreateFontIndirectA
CreateCompatibleDC
GetStockObject

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68dbbdfe51ed584bacf396d8b3372f95

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 224KB - Virtual size: 222KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 224KB - Virtual size: 222KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 7KB