3d29209cf078afdeace6abef345e268e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3d29209cf078afdeace6abef345e268e_JaffaCakes118
Size

461KB
MD5

3d29209cf078afdeace6abef345e268e
SHA1

3f88ef7fed5ac5fc28a7cf472541414c52b5711a
SHA256

de52727185bc0590f8f8eb2300b983e0b6727175dde6f2971722e0df16b482cd
SHA512

4744e00223a055962d6bffbd2bf7fe24ad77e2099bab9499d6a97452db393a634d9abcf89a61848e4144ef8e15bf36871bab21e958f3169c978a307b082e518b
SSDEEP

12288:fyTEKD5eSyqOSLIMYxVTfR/lzxObvTWGiMI45g7Gf0GbE5D3:fy4lSykLIJxVTfhl1bGHeGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d29209cf078afdeace6abef345e268e_JaffaCakes118

Files

3d29209cf078afdeace6abef345e268e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eeecc2fb2c58291c38de2dce42413db8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegDeleteKeyW
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExW
RegCreateKeyExA

kernel32

WideCharToMultiByte
CreateProcessA
GetEnvironmentStrings
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
GetConsoleMode
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCurrentDirectoryA
GetCommandLineW
SetFileTime
LockResource
GetCurrentProcessId
SizeofResource
FileTimeToLocalFileTime
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
TlsGetValue
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
SetStdHandle
LoadLibraryExW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
ExpandEnvironmentStringsA
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
lstrcpyA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
GetWindowsDirectoryA
DeleteFileA
IsValidCodePage
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
GetOEMCP
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
CreateEventW
GlobalAlloc
GetVersion
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
InterlockedExchange
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
UnmapViewOfFile
SetLastError
GetCurrentThread
FormatMessageA
InterlockedDecrement
FindClose
GlobalLock
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
lstrcmpiA
GetTempPathA
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
VirtualFree
Sleep
FindResourceA
VirtualAlloc
CreateDirectoryA
GetEnvironmentVariableA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

gdi32

GetDeviceCaps
DeleteObject
SetBkColor
BitBlt
DeleteDC
CreateSolidBrush
SelectObject
SetTextColor
CreateCompatibleDC
GetStockObject
SetBkMode

user32

GetKeyState
PostMessageA
GetSysColor
DialogBoxParamA
MessageBoxA
EndDialog
GetDesktopWindow
LoadCursorA
ScreenToClient
GetDlgItem
SetTimer
GetSubMenu
CheckMenuItem
SetWindowTextA
SetWindowLongA
SetCapture
GetWindowRect
GetSystemMetrics
EndPaint
KillTimer
BeginPaint
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
SetForegroundWindow
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
SetWindowPos
PeekMessageA
EnableWindow
ShowWindow
DefWindowProcA
FillRect
UpdateWindow
GetParent
GetMessageA
DestroyWindow
SendMessageA
ReleaseDC
GetCursorPos
GetDC
ClientToScreen
DispatchMessageA
IsWindow
PostQuitMessage
SystemParametersInfoA
DispatchMessageW
GetFocus
InvalidateRect
wsprintfA
GetClientRect
CallWindowProcA
SetCursor

msvcrt

__p__commode
__p__fmode
__set_app_type
_strcmpi
_except_handler3
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
free

Sections

.text
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eeecc2fb2c58291c38de2dce42413db8

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

version

gdi32

user32

msvcrt

Sections

.text Size: 285KB - Virtual size: 285KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 158KB - Virtual size: 158KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 285KB - Virtual size: 285KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 158KB - Virtual size: 158KB

.rsrc
Size: 5KB - Virtual size: 5KB