3df228bd8b4867f509b92439cec60130_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3df228bd8b4867f509b92439cec60130_JaffaCakes118
Size

114KB
MD5

3df228bd8b4867f509b92439cec60130
SHA1

d991f070fe1c0d64d76e3c4366c2b9a0bc23d09d
SHA256

f6d7ae536aef3d63ecaa93c48b00231813571aab1c2978c059351c07b8faa4ed
SHA512

2f2a5d2558a32bd31bfc691bab80ad1f8575467d1f2bda893f6c5fab3a4c7939abd56d6d050676c697e9e88fb4582b27c60564e28e67b7a92d3d352d29ed322e
SSDEEP

3072:t9JPP0fN2xrKCUFK+u4urP8aZSowjkx7LnS6V8VnA:t92Nj/S8po6G7S60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df228bd8b4867f509b92439cec60130_JaffaCakes118

Files

3df228bd8b4867f509b92439cec60130_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78c4bf80567f70257df0d583488c5827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

uxtheme

GetThemeColor
OpenThemeData
CloseThemeData
GetThemeFont

user32

SetActiveWindow
GetWindowTextW
DialogBoxParamW
SetWindowTextW
PostMessageW
RegisterClassExW
SetFocus
LoadIconW
GetParent
SetDlgItemTextW
GetWindowLongW
SendDlgItemMessageW
IsDlgButtonChecked
TranslateMessage
SetForegroundWindow
ShowWindow
FindWindowW
RegisterDeviceNotificationW
UnregisterClassW
EnableWindow
GetSysColorBrush
GetSysColor
DispatchMessageW
GetWindowTextLengthW
GetDlgItem
CheckDlgButton
CreateWindowExW
SetWindowLongW
GetMessageW
SetTimer
DefWindowProcW
PostQuitMessage
GetDlgCtrlID
LoadStringW
DestroyWindow
UnregisterDeviceNotification
SendMessageW
FindWindowExW
EndDialog
KillTimer

crypt32

CryptEncodeObjectEx
CertEnumSystemStoreLocation
CryptEncodeObject

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

powrprof

CallNtPowerInformation

ole32

CoCreateInstance
CoTaskMemFree
CoInitializeEx

shell32

CommandLineToArgvW
ShellExecuteExW

advapi32

GetTraceLoggerHandle
RegCreateKeyExW
RegOpenKeyExW
RegisterTraceGuidsW
RegSetValueExW
GetTraceEnableLevel
RegCreateKeyW
UnregisterTraceGuids
RegQueryValueExW
RegCloseKey
GetTraceEnableFlags
TraceMessage

kernel32

GetCurrentThreadId
InterlockedCompareExchange
CloseHandle
InterlockedDecrement
InitializeCriticalSection
GlobalAlloc
InterlockedExchange
LocalAlloc
DeleteCriticalSection
UnhandledExceptionFilter
LocalFree
GetProcessVersion
FreeResource
GetStartupInfoW
TerminateProcess
LeaveCriticalSection
SetUnhandledExceptionFilter
LoadResource
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
WaitForSingleObject
InterlockedIncrement
LockResource
GetLastError
WideCharToMultiByte
GetCurrentProcessId
FindResourceW
QueryPerformanceCounter
GetTickCount
GetCurrentProcess
CreateThread
EnterCriticalSection
Sleep

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsExW

gdi32

SetTextColor
SetBkColor
CreateFontIndirectW
CreateSolidBrush
DeleteObject

msvcrt

__setusermatherr
__p__fmode
_initterm
memset
_exit
__set_app_type
_XcptFilter
??3@YAXPAX@Z
__wgetmainargs
_amsg_exit
_vsnwprintf
wcstoul
_cexit
__p__commode
_wcmdln
?terminate@@YAXXZ
exit
_wcsicmp
??2@YAPAXI@Z
_controlfp

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78c4bf80567f70257df0d583488c5827

Headers

File Characteristics

Imports

uxtheme

user32

crypt32

wtsapi32

powrprof

ole32

shell32

advapi32

kernel32

setupapi

gdi32

msvcrt

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 34KB - Virtual size: 34KB

.rsrc Size: 1024B - Virtual size: 232KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 1024B - Virtual size: 232KB