3afc160a92d772fa55ecb43e1610b453_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3afc160a92d772fa55ecb43e1610b453_JaffaCakes118
Size

324KB
MD5

3afc160a92d772fa55ecb43e1610b453
SHA1

8c3e6f51549713a4387ef77f16b4d80ebc40da04
SHA256

8276eb2f46ba25d848a369d75eb0eff28e239a9a7e3a4f37558f944d8a4fe12f
SHA512

c77ea509fb6b747464cc5cd863813ee1b0eccccffad6c1c18bdc263690cddfc826dc7566dc9fb2664d62177d23a590a28ea82cae51fb176d0ffb6b255090fffb
SSDEEP

6144:hktESN1jrGbybpl5CjSuQpd68FNxM9E3UQLZasyd6qJeXskPpU8:hWIWbpleSuQnVFw9E3PdENulpU8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3afc160a92d772fa55ecb43e1610b453_JaffaCakes118

Files

3afc160a92d772fa55ecb43e1610b453_JaffaCakes118
.exe windows:4 windows x86 arch:x86

382b8b0e52e52cf99ea5041db743fc89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LockResource
MapViewOfFile
MulDiv
MultiByteToWideChar
OpenEventW
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ResetEvent
RtlUnwind
SearchPathW
SetEvent
SetLastError
InterlockedIncrement
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenA
lstrlenW
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetTimeFormatA
GetTickCount
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemDefaultUILanguage
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFileSize
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
FlushInstructionCache
FindResourceW
FindResourceExW
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumUILanguagesW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileMappingW
CreateEventW
SetUnhandledExceptionFilter
CloseHandle

user32

MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
NotifyWinEvent
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassExW
ReleaseCapture
ReleaseDC
RemovePropW
ReplyMessage
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetRectEmpty
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UpdateWindow
ValidateRect
WindowFromPoint
AllowSetForegroundWindow
AppendMenuW
AttachThreadInput
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharNextW
CheckDlgButton
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
MapWindowPoints
LoadStringW
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDlgButtonChecked
IsChild
CloseWindow
CopyRect
CreateDialogParamW
InvalidateRect
IntersectRect
InflateRect
InSendMessageEx
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowLongW
GetWindowInfo
GetWindow
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetMessagePos
GetMenuState
GetKeyState
GetFocus
GetDlgItemInt
GetDlgItem
GetDesktopWindow
GetDC
GetComboBoxInfo
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoExW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FillRect
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawFocusRect
DrawEdge
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DefWindowProcW
CreateWindowExW
CreatePopupMenu
LoadAcceleratorsW

ole32

CoTaskMemRealloc
CoGetInterfaceAndReleaseStream
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VarBstrCat
VarBstrCmp
VarUI4FromStr
VariantChangeType
VariantClear
VariantCopy
VariantInit
SysAllocStringByteLen

oleacc

LresultFromObject
CreateStdAccessibleObject

advapi32

RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW

shell32

SHGetFolderPathW
SHGetInstanceExplorer

gdi32

GetPixel
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetTextExtentPointW
IntersectClipRect
LineTo
MoveToEx
PatBlt
Rectangle
SelectClipRgn
SelectObject
GetObjectW
SetBkMode
SetLayout
SetTextAlign
SetTextColor
StretchBlt
TextOutW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt
GetDeviceCaps
GetCurrentObject
GetClipRgn
GetBkColor
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreatePatternBrush
SetBkColor
CreateFontIndirectW
CreateFontW

wininet

FindNextUrlCacheEntryW
GetUrlCacheEntryInfoW
HttpOpenRequestW
InternetCanonicalizeUrlW
InternetGetCookieW
InternetSetOptionW
ReadUrlCacheEntryStream
RetrieveUrlCacheEntryStreamW
UnlockUrlCacheEntryStream
DeleteUrlCacheEntryW
FindFirstUrlCacheEntryW

shlwapi

StrChrW
StrToIntW
UrlCanonicalizeW
StrRChrW
SHStrDupW
SHDeleteKeyW
SHCreateStreamOnFileW
PathUndecorateW
StrCmpW
StrChrA
StrCmpIW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathAppendW
StrStrW
PathAddExtensionW

Exports

Exports

SqmAddToAverage
SqmAddToStream
SqmAddToStreamDWord
SqmAddToStreamString
SqmAddToStreamV
SqmCleanup
SqmClearFlags
SqmCreateNewId
SqmEndSession
SqmFlushSession
SqmGetEnabled
SqmGetFlags
SqmGetMachineId
SqmGetSession
SqmGetSessionStartTime
SqmGetUserId
SqmIncrement
SqmIsWindowsOptedIn
SqmReadSharedMachineId
SqmReadSharedUserId
SqmSet
SqmSetAppId
SqmSetAppVersion
SqmSetBits
SqmSetBool
SqmSetCurrentTimeAsUploadTime
SqmSetEnabled
SqmSetFlags
SqmSetIfMax
SqmSetIfMin
SqmSetMachineId
SqmSetString
SqmSetUserId
SqmStartSession
SqmStartUpload
SqmSysprepGeneralize
SqmSysprepSpecialize
SqmTimerAccumulate
SqmTimerAddToAverage
SqmTimerRecord
SqmTimerStart
SqmUnattendedSetup
SqmWaitForUploadComplete
SqmWriteSharedMachineId
SqmWriteSharedUserId

Sections

.text
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

382b8b0e52e52cf99ea5041db743fc89

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

oleacc

advapi32

shell32

gdi32

wininet

shlwapi

Exports

Exports

Sections

.text Size: 228KB - Virtual size: 228KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 12KB - Virtual size: 12KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 228KB - Virtual size: 228KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 24KB - Virtual size: 24KB