3733f2d7b522a7e37344fa14c1b78db0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3733f2d7b522a7e37344fa14c1b78db0_JaffaCakes118
Size

850KB
MD5

3733f2d7b522a7e37344fa14c1b78db0
SHA1

cfda715f0d71d53a420e0bbdc83c4252fafc5d18
SHA256

3d1bfe174efe894873c3f013824fd6e44825a3ff733977e46265de04ff10ef5f
SHA512

8b063d24896671075b4dc260b5ac5941403f378c8c6b038455d117a74893969906588a6bc28a04554d5a3c751964608401af3113a07e0287fcdaf7e5b09cea27
SSDEEP

12288:l8Gjb2tuV2rGHAOm/o+AzRYtUGMI19kJ862//ay7tUQbTSqU5zht8aHCwDLcwEX9:+ztu4GaudYPV19kw//al5FtHD2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3733f2d7b522a7e37344fa14c1b78db0_JaffaCakes118

Files

3733f2d7b522a7e37344fa14c1b78db0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e12ee0a34af0c9c147d75f4618c96399

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
SizeofResource
SetErrorMode
HeapCreate
GetCurrentProcessId
HeapDestroy
SetHandleCount
GetVersionExA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
CompareStringA
LocalAlloc
CreateFileA
WriteConsoleA
SetFileTime
GlobalReAlloc
HeapAlloc
QueryPerformanceCounter
RaiseException
SetEnvironmentVariableA
LoadResource
TlsGetValue
GetACP
IsDebuggerPresent
GetLastError
VirtualQuery
LCMapStringA
GetLocaleInfoA
GetCommandLineW
InterlockedDecrement
FlushFileBuffers
ConvertDefaultLocale
GetConsoleOutputCP
GlobalFlags
GetSystemInfo
DeleteCriticalSection
LocalReAlloc
GetFileSize
Sleep
SystemTimeToFileTime
DuplicateHandle
GlobalHandle
LeaveCriticalSection
GetProcessHeap
GetStdHandle
GetFileType
InterlockedIncrement
lstrcmpA
GetCurrentThread
EnterCriticalSection
FileTimeToLocalFileTime
WriteFile
MulDiv
GlobalLock
CloseHandle
VirtualFree
GetStartupInfoA
GetConsoleCP
TlsAlloc
TlsFree
GetSystemDirectoryA
GetCommandLineA
ReadFile
GetThreadLocale
RtlUnwind
lstrlenA
LockResource
GetWindowsDirectoryA
SetLastError
UnlockFile
SetFilePointer
FileTimeToSystemTime
TlsSetValue
GlobalDeleteAtom
GlobalUnlock
InterlockedExchange
LocalFree
LockFile
HeapFree
GetStringTypeA
SetEndOfFile
SetStdHandle
GetConsoleMode
HeapReAlloc
FreeResource
GetEnvironmentStrings
LocalFileTimeToFileTime
GetFileTime
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
EnumResourceLanguagesW
InitializeCriticalSection
VirtualAlloc
FreeLibrary
HeapSize
lstrcpyA
GetCurrentThreadId
GetModuleHandleA
GetOEMCP
LoadLibraryA
GetLocalTime
GlobalFree
GetProcAddress
lstrcatA
GetTimeZoneInformation
GlobalAlloc
FindClose
ExitProcess

user32

TrackPopupMenu
PostQuitMessage
GetNextDlgTabItem
DrawIcon
ShowScrollBar
IntersectRect
BeginPaint
IsZoomed
GetWindowRect
MapDialogRect
CreatePopupMenu
GetMenuItemCount
SendDlgItemMessageA
SetScrollRange
GetActiveWindow
BeginDeferWindowPos
SetActiveWindow
ReleaseDC
SetMenu
SystemParametersInfoA
SetCursor
GetScrollInfo
UnhookWindowsHookEx
ScrollWindow
GetMenuCheckMarkDimensions
GetNextDlgGroupItem
CopyRect
RedrawWindow
SetScrollPos
UnpackDDElParam
EndPaint
MapWindowPoints
GetWindowPlacement
MessageBeep
IsWindow
SetMenuItemBitmaps
SetWindowRgn
ValidateRect
TranslateMessage
GetSubMenu
CallNextHookEx
GetDesktopWindow
IsWindowVisible
UpdateWindow
UnregisterClassA
IsWindowEnabled
GetScrollPos
CheckMenuItem
EndDialog
GetDCEx
GetWindowThreadProcessId
BringWindowToTop
SetTimer
SetRect
GetSystemMetrics
ShowOwnedPopups
ReleaseCapture
GetForegroundWindow
SetFocus
GetDlgItem
GetTopWindow
GetLastActivePopup
GetClientRect
PtInRect
GetParent
GetDlgCtrlID
GetMenuState
IsChild
GetMessagePos
GetScrollRange
GetSysColorBrush
ReuseDDElParam
ShowWindow
OffsetRect
MoveWindow
GetWindowDC
SetRectEmpty
SetScrollInfo
SetParent
InvalidateRgn
SetWindowPos
WindowFromPoint
GetFocus
GetSysColor
IsIconic
DestroyIcon
DestroyWindow
GetWindowRgn
GetWindow
EnableMenuItem
GetMessageTime
EndDeferWindowPos
SetCapture
ScreenToClient
GetCapture
GetSystemMenu
GetCursorPos
FillRect
SetWindowContextHelpId
GetDC
GetMenuItemID
InflateRect
GetKeyState
SetForegroundWindow
AdjustWindowRectEx
KillTimer
IsRectEmpty
InvalidateRect
LockWindowUpdate
DestroyMenu
DeferWindowPos
EqualRect
ClientToScreen
DeleteMenu
GetMenu

gdi32

SetTextColor
CreateEllipticRgn
SetWindowExtEx
SelectClipRgn
CreatePatternBrush
CombineRgn
SetViewportExtEx
BitBlt
RestoreDC
SetBkMode
GetDeviceCaps
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
OffsetViewportOrgEx
Escape
ScaleViewportExtEx
ExcludeClipRect
IntersectClipRect
GetMapMode
ExtSelectClipRgn
ScaleWindowExtEx
GetWindowExtEx
SetViewportOrgEx
DPtoLP
GetBkColor
DeleteDC
RectVisible
SetMapMode
CreateCompatibleBitmap
OffsetRgn
SetBkColor
GetRgnBox
PtVisible
SaveDC
Ellipse
PatBlt
GetStockObject
CreateCompatibleDC
DeleteObject
StretchDIBits
SelectObject
CreateBitmap
GetTextColor
GetClipBox
SetRectRgn
GetPixel

advapi32

SetFileSecurityW
RegCloseKey

shell32

DragFinish

ole32

OleIsCurrentClipboard
CoFreeUnusedLibraries
CoRevokeClassObject
OleFlushClipboard
StgOpenStorageOnILockBytes
OleUninitialize
CreateStreamOnHGlobal
CoCreateInstance
StgCreateDocfileOnILockBytes
CoGetClassObject
OleInitialize
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID

oleaut32

OleLoadPicture
OleCreateFontIndirect
SysStringLen
VariantInit
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
VariantClear
SystemTimeToVariantTime
VariantCopy
SysAllocStringLen
SysFreeString
VariantChangeType

comctl32

ImageList_LoadImageW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathStripToRootW
PathFileExistsW
PathIsUNCW

msvcrt

atoi

Sections

.text
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12ee0a34af0c9c147d75f4618c96399

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

msvcrt

Sections

.text Size: 555KB - Virtual size: 555KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 263KB - Virtual size: 284KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 555KB - Virtual size: 555KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 263KB - Virtual size: 284KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 3KB - Virtual size: 3KB