3cfe5c7155733c4449e68057f1e3f6a3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3cfe5c7155733c4449e68057f1e3f6a3_JaffaCakes118
Size

263KB
MD5

3cfe5c7155733c4449e68057f1e3f6a3
SHA1

f001d0b26907774473c39c812caae8994008edf7
SHA256

fa6b7f71ac45b1684e0c17c5be3e45a897f344606180332d9180373f8817aeda
SHA512

29c1d49901d0d23ef1c6218276c22cb87e0aefc5874ffcd7cd528893fd12677a16a747844a79dde201e76d764e054038539de0f1cbf16bcfe10d519884881736
SSDEEP

6144:EZHa0ZmmSPFT5B5clfiJ4vskJk3MtCTZ0:GHtZmmSPFtTcliJ8skJk3M4TZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cfe5c7155733c4449e68057f1e3f6a3_JaffaCakes118

Files

3cfe5c7155733c4449e68057f1e3f6a3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2cfbfdaaf58590446cb8ea8b97f00f5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetSystemTime
TlsAlloc
IsValidCodePage
CreateFileW
WriteConsoleW
HeapReAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
LCMapStringW
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
LoadLibraryA
GetProcAddress
GetLastError
CreateDirectoryA
MultiByteToWideChar
CreateFileA
ReadFile
Sleep
GetCommandLineA
GetTickCount
GetCurrentProcess
InterlockedDecrement
HeapAlloc
LoadResource
SetFilePointer
FindResourceA
DeleteCriticalSection
GetStringTypeW
GetCurrentThreadId
SetLastError
GetOEMCP
GetACP
InterlockedIncrement
GetCPInfo
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
TlsFree
TlsSetValue
GetFileSize
GetFileType
lstrlenA
WideCharToMultiByte
LocalFree
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
EncodePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
TlsGetValue

user32

mouse_event
GetScrollPos
SetScrollInfo
SetDlgItemTextA
GetDlgItemTextA
FindWindowA
DestroyWindow
PostQuitMessage
SendDlgItemMessageA
LoadBitmapA
LoadMenuA
GetClientRect
SendMessageA
EnumWindows
GetDC
MessageBoxA
InvalidateRect
SetCursorPos
ScrollWindow
EndDialog
GetCursorPos
WindowFromDC
UpdateWindow

gdi32

SetWindowOrgEx
SetPixel
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
BitBlt

comdlg32

GetFileTitleW
GetOpenFileNameA

advapi32

IsTextUnicode

ole32

CoInitializeEx
CoUninitialize
CoSetProxyBlanket
CoCreateInstance

oleaut32

SysFreeString
VariantChangeType
VariantInit
VariantClear
SysAllocString

ws2_32

WSAStartup

dinput8

DirectInput8Create

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cfbfdaaf58590446cb8ea8b97f00f5f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

ws2_32

dinput8

Sections

.text Size: 66KB - Virtual size: 66KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 178KB - Virtual size: 191KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 66KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 178KB - Virtual size: 191KB

.rsrc
Size: 1KB - Virtual size: 1KB