3dfc2e3137c7888d72c0699e5185a99c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3dfc2e3137c7888d72c0699e5185a99c_JaffaCakes118
Size

180KB
MD5

3dfc2e3137c7888d72c0699e5185a99c
SHA1

a8a7491b8be3d07943958ec90abe0bab2e6055ae
SHA256

74511c17c4c324e161302feeb2ebaf593cdbf75d784d5240bd79671b410a5b34
SHA512

4d2f60e4bbd95155e2d74e76cb94b3a9bee2c887400592c848039d3bffe03a529b66e0910d3d96fbb3999d88e4b6fd845db9d41ef1906e477e3c48cd736bb321
SSDEEP

3072:QjvPhiNBmwl05yGrnM/4fYvuckJ4y8IBUGybiJJC/adLimHoMnMdVFx:QzPhXHyGrnPxsXIBUGUxALia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dfc2e3137c7888d72c0699e5185a99c_JaffaCakes118

Files

3dfc2e3137c7888d72c0699e5185a99c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61ee7cb4bb175c09749bb32c46dad19f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ImageList_Draw
ImageList_Remove
ImageList_Create
CreateToolbarEx
ord17
ImageList_ReplaceIcon

kernel32

GetFileAttributesA
WideCharToMultiByte
GetModuleFileNameA
OutputDebugStringA
LoadLibraryA
InterlockedDecrement
CreateFileA
SetEndOfFile
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
ReadFile
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
SetStdHandle
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetWindowsDirectoryA
FreeEnvironmentStringsA
HeapSize
UnhandledExceptionFilter
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
FindFirstFileA
LCMapStringW
WritePrivateProfileStringA
WriteFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
ExitProcess
GetCommandLineA
GetStartupInfoA
ExitThread
TlsSetValue
CreateThread
ResumeThread
InterlockedIncrement
HeapReAlloc
RtlUnwind
HeapAlloc
HeapFree
SearchPathA
GetVersion
GetModuleHandleA
GetProcAddress
LocalAlloc
lstrcmpA
LocalFree
ExpandEnvironmentStringsA
FormatMessageA
lstrcpyA
lstrlenA
lstrcatA
GetTickCount
FindNextFileA
FindClose
OpenProcess
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteFileA
GetPrivateProfileStringA
GetCurrentThreadId
WriteProfileStringA
GetCurrentProcess
GetLastError
CloseHandle
GetProfileStringA
CreateDirectoryA
SetFileAttributesA
MoveFileA
RemoveDirectoryA
LCMapStringA
MultiByteToWideChar
FreeEnvironmentStringsW
RaiseException

user32

PtInRect
BeginPaint
DispatchMessageA
EndPaint
DrawFrameControl
TranslateMessage
TranslateAcceleratorA
GetMessageA
GetClassNameA
DeferWindowPos
LoadAcceleratorsA
CreateDialogParamA
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
GetWindowLongA
SetWindowLongA
DrawMenuBar
LoadStringA
PostQuitMessage
DialogBoxParamA
LoadCursorA
GetSysColorBrush
ChildWindowFromPoint
InvalidateRect
EndDialog
TrackPopupMenu
EnableMenuItem
DeleteMenu
GetSubMenu
InsertMenuA
SetDlgItemTextA
RegisterClassExA
FindWindowA
WaitForInputIdle
GetWindowThreadProcessId
SetForegroundWindow
FindWindowExA
CloseClipboard
OpenClipboard
EmptyClipboard
SetClipboardData
LoadIconA
GetMenu
CheckMenuItem
SetWindowTextA
MessageBoxA
SetWindowPos
GetWindowRect
IsIconic
IsZoomed
GetDlgItem
SetTimer
GetParent
SetCursor
GetCursorPos
GetClientRect
CreateWindowExA
SetFocus
CallWindowProcA
GetSysColor
GetSystemMetrics
GetFocus
GetDC
SendMessageA
DrawTextA
ReleaseDC
MoveWindow
ShowWindow
ClientToScreen
ScreenToClient
PostMessageA
DestroyWindow
DefWindowProcA
LoadImageA
EnumDisplaySettingsA
IsDialogMessageA

gdi32

GetObjectA
CreateFontIndirectA
GetStockObject
SetBkColor
ExtTextOutA
GetTextExtentPoint32A
SelectObject
SetTextColor
SetBkMode
CreateSolidBrush

comdlg32

GetSaveFileNameA

advapi32

RegEnumKeyA
RegLoadKeyA
RegOpenKeyExA
RegCloseKey
RegUnLoadKeyA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
DeleteService
CloseServiceHandle
OpenServiceA
OpenSCManagerA
AllocateAndInitializeSid
FreeSid
EqualSid
LookupAccountSidA
GetTokenInformation
RegDeleteKeyA

shell32

ShellExecuteA
SHGetFileInfoA
ShellExecuteExA

ole32

CoInitialize
CoTaskMemFree
CoCreateInstance

oleaut32

VariantClear
SysAllocString
SysFreeString

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

61ee7cb4bb175c09749bb32c46dad19f

Headers

File Characteristics

Imports

version

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 28KB

.rsrc Size: 40KB - Virtual size: 38KB

.text Size: 12KB - Virtual size: 9KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 28KB

.rsrc
Size: 40KB - Virtual size: 38KB

.text
Size: 12KB - Virtual size: 9KB