3f578f4e11a17eaad9d8b8468f965785_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f578f4e11a17eaad9d8b8468f965785_JaffaCakes118
Size

501KB
MD5

3f578f4e11a17eaad9d8b8468f965785
SHA1

426b2d68dd9ffc48216be5bf082a36fe552a5c70
SHA256

ae663ac25a275acfce7110900eddb8e413bd35b4504b02b219e883cfe5054514
SHA512

700cef208fa037332694757f6129dfd88a884f4cd76a0271610aeffb45da2ebf022818c38838b67c4951174406a9573956a5090f4dafcc4b29fdbe281d4d2a5c
SSDEEP

12288:9j8Rt2Fq7oIXn7aTIFMaLvBzuJ3344qBFtc5YwA0YHAfrUXpiwr6QYmjRP:9oRt2GasGUvBzM3hYq3AXgSt6QRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f578f4e11a17eaad9d8b8468f965785_JaffaCakes118

Files

3f578f4e11a17eaad9d8b8468f965785_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f40f3ae5b365b0b54e9d2676cff863bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetCommandLineW
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
WideCharToMultiByte
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
HeapCreate
HeapAlloc
GetStdHandle
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
HeapSetInformation
EncodePointer
DecodePointer
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedCompareExchange
VirtualProtect
IsBadReadPtr
LoadLibraryA
VirtualFree
GetProcessHeap
HeapFree
VirtualAlloc
Sleep
SetLastError
lstrcpynW
lstrlenA
lstrcpynA
GetCurrentThreadId
lstrcmpW
GetCurrentProcessId
GetCurrentProcess
FlushInstructionCache
lstrcpyW
LoadLibraryW
GetModuleFileNameW
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
FlushFileBuffers
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
MulDiv
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
GetProcAddress
lstrlenW
GetVersionExW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
RaiseException
FindResourceW
SizeofResource
LoadResource
LockResource

user32

EndDialog
GetWindow
MonitorFromWindow
GetDC
RegisterClassExW
ShowWindow
RemoveMenu
AppendMenuW
DialogBoxParamW
LoadBitmapW
LoadStringA
PostQuitMessage
LoadStringW
GetWindowRect
SetMenuDefaultItem
GetClassInfoExW
SetMenu
LoadImageW
CreatePopupMenu
GetMenu
DestroyWindow
GetSubMenu
PeekMessageW
IsMenu
SetWindowsHookExW
GetClassNameW
CallNextHookEx
GetKeyState
CharLowerW
UnhookWindowsHookEx
InflateRect
RegisterWindowMessageW
GetSysColorBrush
TrackPopupMenuEx
WindowFromPoint
MessageBeep
FrameRect
ModifyMenuW
MonitorFromPoint
GetMonitorInfoW
DrawFrameControl
GetFocus
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetActiveWindow
GetWindowThreadProcessId
IsWindowEnabled
IsWindowVisible
MapWindowPoints
PostMessageW
DestroyMenu
GetCapture
SetCursor
ReleaseDC
GetWindowDC
GetSystemMetrics
SystemParametersInfoW
GetMessagePos
PtInRect
ReleaseCapture
SetCapture
UpdateWindow
ScreenToClient
OffsetRect
GetSysColor
EndPaint
BeginPaint
SetRect
DrawEdge
DrawTextW
FillRect
CallWindowProcW
GetParent
SetFocus
InvalidateRect
GetClientRect
SetWindowPos
SendMessageW
CreateWindowExW
SetRectEmpty
LoadCursorW
CharNextW
DefWindowProcW
IsWindow
GetWindowLongW
SetWindowLongW
TranslateAcceleratorW
UnregisterClassA

gdi32

GetCurrentObject
CreateDIBSection
SetBkColor
SetBrushOrgEx
CreateFontIndirectW
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
PatBlt
DeleteDC
LineTo
MoveToEx
DeleteObject
GetStockObject
GetObjectW
SelectObject
SetBkMode
CreatePen
SetTextColor

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VarUI4FromStr

advapi32

RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW

comctl32

ImageList_Destroy
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
CreateStatusWindowW
ord8
ImageList_Create
ImageList_LoadImageW
InitCommonControlsEx
ImageList_AddMasked

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f40f3ae5b365b0b54e9d2676cff863bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

advapi32

comctl32

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 7KB - Virtual size: 16KB

.rsrc Size: 438KB - Virtual size: 437KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 7KB - Virtual size: 16KB

.rsrc
Size: 438KB - Virtual size: 437KB

.reloc
Size: 11KB - Virtual size: 11KB