3d47be9680b552b55cfecf6c5638be2d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3d47be9680b552b55cfecf6c5638be2d_JaffaCakes118
Size

990KB
MD5

3d47be9680b552b55cfecf6c5638be2d
SHA1

6fbc781deb274563341b04d778ed8501bdaeeb74
SHA256

e4c7a12e894accb47338cb27430f7f66b5b6aa637b2e7af0779c1b1f21581c20
SHA512

3a23d48227e155ab5a29c21514cb84edc19b1fc02a7336e25ff8fd62af04ad5181af33de181a0d9c66c7a956efeeccbe1bf0d3647d4c9e453063aa651bc4412b
SSDEEP

24576:7458WDzudjpI7PxkK/wOcRCNV9tJuHdEvAjHOH/QcBHfdo:74LiWpSO+C3NuOvArMoUFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d47be9680b552b55cfecf6c5638be2d_JaffaCakes118

Files

3d47be9680b552b55cfecf6c5638be2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afcf151d3006f664958506519766751d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalLock
GlobalAlloc
GlobalSize
FreeLibrary
GetProcAddress
LoadLibraryW
WaitForSingleObject
GetModuleHandleW
SetEnvironmentVariableW
GetModuleFileNameW
GetPriorityClass
GetFileAttributesW
GlobalUnlock
GetCurrentDirectoryW
OutputDebugStringW
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
GetFileTime
CompareFileTime
ExitProcess
GetCommandLineW
CreateThread
GetCurrentProcessId
Sleep
InterlockedCompareExchange
GetCurrentProcess
SetPriorityClass
InterlockedIncrement
LeaveCriticalSection
ExpandEnvironmentStringsW
EnterCriticalSection
GetVersionExW
DeleteFileW
GetCurrentThreadId
ExpandEnvironmentStringsA
CreateProcessW
WriteFile
Beep
CreateFileW
GetFileSize
ReadFile
MultiByteToWideChar
CloseHandle
InterlockedExchange
GetLastError
WideCharToMultiByte
DebugBreak
InterlockedDecrement
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
LoadLibraryA
SetLastError
FormatMessageW
CreateEventA
SetEvent
SetErrorMode
SetFilePointer
GetComputerNameW
GetModuleFileNameA

msvcrt

__wgetmainargs
_cexit
_exit
_XcptFilter
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_controlfp
_spawnlp
_vsnprintf
_vsnwprintf
__CxxFrameHandler
getenv
_wtoi64
exit
realloc
iswalnum
iswalpha
_wctime
wcstoul
iswdigit
_wgetenv
_wtoi
_itow
towlower
iswprint
wcsstr
towupper
wcsrchr
??2@YAPAXI@Z
_purecall
_wcsdup
wcstok
_wcsicmp
_wcsnicmp
swscanf
iswspace
_wfopen
fprintf
fclose
calloc
memset
memmove
memcpy
malloc
wcsncmp
wcschr
free
??3@YAXPAX@Z

shell32

DragAcceptFiles

user32

ShowWindow
GetWindowThreadProcessId
GetForegroundWindow
GetTitleBarInfo
CopyRect
DrawIconEx
FillRect
SetRect
GetSysColorBrush
GetWindowDC
GetDCEx
IsWindowVisible
DefWindowProcW
RedrawWindow
GetActiveWindow
IsZoomed
SetCursor
PtInRect
EndDeferWindowPos
BeginDeferWindowPos
SystemParametersInfoW
LoadIconW
RegisterClassExW
LoadCursorW
LoadStringW
SetParent
OpenIcon
MapWindowPoints
IsWindowEnabled
ChildWindowFromPointEx
EndPaint
BeginPaint
SetLayeredWindowAttributes
WindowFromPoint
DispatchMessageW
TranslateMessage
GetMessageW
GetCapture
GetDlgItemTextW
SetDlgItemTextW
SendDlgItemMessageW
GetParent
IsClipboardFormatAvailable
DeleteMenu
GetMenuItemCount
GetMenuItemInfoW
GetDlgItem
GetDlgItemInt
IsDlgButtonChecked
CheckDlgButton
CheckRadioButton
SetDlgItemInt
GetMenuState
PostQuitMessage
AdjustWindowRect
GetMenu
DrawTextW
GetSysColor
CallNextHookEx
UpdateWindow
MessageBoxW
TranslateAcceleratorW
PeekMessageW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
DestroyMenu
CreatePopupMenu
GetScrollInfo
SetWindowsHookExW
GetSubMenu
LoadAcceleratorsW
RegisterWindowMessageW
RegisterClipboardFormatW
WaitMessage
SetActiveWindow
SetWindowLongW
ModifyMenuW
TrackPopupMenu
GetDesktopWindow
GetDC
ReleaseDC
RemoveMenu
DrawMenuBar
GetCursorPos
ScreenToClient
SetWindowPos
DeferWindowPos
ClientToScreen
OffsetRect
SetWindowPlacement
GetWindowPlacement
InflateRect
GetWindowRect
MessageBeep
CreateMenu
InsertMenuItemW
MoveWindow
IsIconic
GetKeyState
GetSystemMetrics
ReleaseCapture
SetCapture
SetMenuItemInfoW
GetWindowLongW
DestroyWindow
SetTimer
EnableWindow
InvalidateRect
KillTimer
PostMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
IsChild
GetClientRect
EnableMenuItem
CreateWindowExW
CheckMenuItem
GetFocus
SendMessageW
BringWindowToTop

comctl32

InitCommonControlsEx
CreateToolbarEx
CreateStatusWindowW
PropertySheetW

advapi32

RegCloseKey
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExA

gdi32

CreateSolidBrush
GetStockObject
TextOutW
MoveToEx
LineTo
Polyline
GetTextExtentPointW
CreateFontIndirectW
DeleteObject
GetTextMetricsW
GetTextExtentPoint32W
PatBlt
SetTextColor
SetBkColor
PtVisible
SelectObject
CreatePen

mpr

WNetDisconnectDialog

ole32

CoTaskMemFree
CoInitializeEx

winmm

waveInReset
SendDriverMessage
midiOutReset

Sections

.text
Size: 677KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afcf151d3006f664958506519766751d

Headers

File Characteristics

Imports

kernel32

msvcrt

shell32

user32

comctl32

advapi32

gdi32

mpr

ole32

winmm

Sections

.text Size: 677KB - Virtual size: 676KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 268KB - Virtual size: 267KB

.rsrc Size: 37KB - Virtual size: 3.2MB

Size: - Virtual size: 4KB

.text
Size: 677KB - Virtual size: 676KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 268KB - Virtual size: 267KB

.rsrc
Size: 37KB - Virtual size: 3.2MB