3bf4c5b89f33421df7ef76d1176ed122_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3bf4c5b89f33421df7ef76d1176ed122_JaffaCakes118
Size

100KB
MD5

3bf4c5b89f33421df7ef76d1176ed122
SHA1

93f5799fb23c09099c2819bbee6f184d9d97110d
SHA256

0dcd914463bbcd7e139d9adcea6efdb5c524006e1f2fa1308a5879995f96be07
SHA512

c320b014505586613bb9915948f0c91d8ecd536d4fe9ff81085e6bd01bdc5ab60b08ff5f4de87484b745672ef76dcb57f8b9c31697e7e21b71ff47cbf547d4ec
SSDEEP

1536:6THhBkxz/4iD66XUEb3msMf4KsO4eSnsypF+qqjtax+57bma62fR2v:6Duz/xxUs3m3gKX4yGF+XjtakmhWR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf4c5b89f33421df7ef76d1176ed122_JaffaCakes118

Files

3bf4c5b89f33421df7ef76d1176ed122_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64625ab46ced8aa0a09a58814b602a07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetCurrentThreadId
DeleteCriticalSection
ResetEvent
GetEnvironmentStrings
LoadLibraryExA
GetSystemDefaultLangID
DeleteFileA
InitializeCriticalSection
GetCommandLineA
CloseHandle
SetLastError
FormatMessageA
LoadResource
GetOEMCP
LoadLibraryA
GetProcAddress
lstrlenA
HeapDestroy
MulDiv
ExitThread
GetACP
SetErrorMode
SizeofResource
lstrcpynA
CompareStringA
FindFirstFileA
ExitProcess
VirtualQuery
GlobalAddAtomA
GetCurrentProcess
FindClose
GetFullPathNameA
Sleep
GetUserDefaultLCID
GetStartupInfoA
WaitForSingleObject
GetCurrentThread
SetHandleCount
SetThreadLocale
VirtualAlloc
HeapFree
GetModuleHandleA
VirtualFree
ReadFile
CreateFileA
lstrcpyA
lstrcmpiA
GetStringTypeW
EnterCriticalSection
GlobalFindAtomA
VirtualAllocEx
LockResource
GetTickCount
GetCPInfo
LocalAlloc
CreateThread
GetVersionExA
lstrcatA
LocalReAlloc
GetDiskFreeSpaceA
GetFileType
GlobalDeleteAtom
GetLastError
GetStdHandle
GetDateFormatA
RaiseException
LocalFree
GetLocalTime

advapi32

RegCreateKeyA

msvcrt

memmove
tan
rand
strncmp
memcmp

shlwapi

SHSetValueA
SHDeleteKeyA
SHStrDupA
SHEnumValueA
PathIsDirectoryA
SHQueryValueExA
PathFileExistsA
PathIsContentTypeA

oleaut32

SafeArrayGetElement
SysReAllocStringLen
SafeArrayCreate
VariantChangeType
SafeArrayGetUBound
SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

user32

IsWindowVisible
GetMenuItemInfoA
EnableWindow
CreatePopupMenu
SetWindowPos
SystemParametersInfoA
IsWindowEnabled
ShowWindow
GetClassLongA
MessageBoxA
TrackPopupMenu
GetActiveWindow
EnumWindows
DispatchMessageA
GetMessagePos
GetWindow
GetSysColorBrush
CallWindowProcA
GetClientRect
GetPropA
GetForegroundWindow
FrameRect
GetCursor
EnableScrollBar
DefWindowProcA
GetSubMenu
GetSysColor
IsChild
GetScrollRange
GetClipboardData
GetDC
GetFocus
EnableMenuItem
GetCapture
CreateMenu
CallNextHookEx

comctl32

ImageList_Destroy
ImageList_DragShowNolock
ImageList_Draw
ImageList_GetBkColor

shell32

SHGetDesktopFolder
SHGetFolderPathA

ole32

CoReleaseMarshalData
CoGetObjectContext
GetHGlobalFromStream
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateFreeThreadedMarshaler
WriteClassStm
CoCreateInstanceEx
CLSIDFromProgID
StringFromIID

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64625ab46ced8aa0a09a58814b602a07

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

shlwapi

oleaut32

user32

comctl32

shell32

ole32

Sections

.text Size: 47KB - Virtual size: 46KB

.bss Size: 512B - Virtual size: 412B

.idata Size: 47KB - Virtual size: 46KB

.rdata Size: 1KB - Virtual size: 1KB

.init Size: 2KB - Virtual size: 2KB

.text
Size: 47KB - Virtual size: 46KB

.bss
Size: 512B - Virtual size: 412B

.idata
Size: 47KB - Virtual size: 46KB

.rdata
Size: 1KB - Virtual size: 1KB

.init
Size: 2KB - Virtual size: 2KB