3f8cfc247b215e101a93788dc5c3be44_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f8cfc247b215e101a93788dc5c3be44_JaffaCakes118
Size

202KB
MD5

3f8cfc247b215e101a93788dc5c3be44
SHA1

e86d1d587ccbee71282f96c56eff886836e0c862
SHA256

36ab438ea935a5cd4a0bd0d8762f9a006e23898cc85f8e8c8baef6bbb1262bb8
SHA512

699559c20ff859dacce772690fa42e8b5c2eb88316b151b2f6514f6d511ad836662a39be730082cbba6982ea9e76e023bc9ddf8b61ee7f55778299d3dd9e2e66
SSDEEP

1536:95rbEC9083WGklMpWhfEJLJrHAHh5aoVIfr+yrCHyWjDcPz91IewaUA21iH0SCXf:95rYCp5fsB5BIfrnGozCuKSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f8cfc247b215e101a93788dc5c3be44_JaffaCakes118

Files

3f8cfc247b215e101a93788dc5c3be44_JaffaCakes118
.dll windows:5 windows x86 arch:x86

60b2d81d6c56ae2c6312ef8328052235

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA
GetProcAddress
VirtualAllocEx
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleFileNameA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FreeLibrary

user32

IsWindowVisible
KillTimer
LoadCursorW
LoadIconW
LoadImageW
MapVirtualKeyW
MessageBeep
MessageBoxW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RegisterClassExW
RegisterClassW
RegisterHotKey
RegisterWindowMessageW
IsWindowEnabled
ReleaseDC
ScreenToClient
ScrollDC
SendDlgItemMessageW
SendMessageTimeoutW
SendMessageW
SendNotifyMessageW
SetCapture
SetCursor
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetRect
SetRectEmpty
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnregisterHotKey
UpdateLayeredWindow
UpdateWindow
ValidateRect
WinHelpW
keybd_event
wsprintfW
LoadCursorA
LoadIconA
IsWindow
IsRectEmpty
IsDlgButtonChecked
IsDialogMessageW
InvalidateRect
IntersectRect
InflateRect
GetWindowRgn
GetWindowRect
GetWindowLongW
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetParent
GetMessageW
GetKeyboardState
GetKeyboardLayout
GetKeyNameTextW
GetForegroundWindow
GetDoubleClickTime
GetDlgItemInt
GetDlgItem
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetCapture
GetAsyncKeyState
FrameRect
FindWindowW
FindWindowExW
FillRect
EndPaint
EnableWindow
DrawTextW
DrawIconEx
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CopyRect
ClientToScreen
CheckRadioButton
CheckDlgButton
CharNextW
CallWindowProcW
BeginPaint
AppendMenuW
AllowSetForegroundWindow
ReleaseCapture

gdi32

BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreateHalftonePalette
CreatePalette
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
TranslateCharsetInfo
TextOutW
StretchDIBits
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetPolyFillMode
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
RoundRect
RealizePalette
MoveToEx
LineTo
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetTextColor
GetTextAlign
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetRegionData
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetDeviceCaps
GdiFlush
FrameRgn
FillRgn
FillPath
ExtTextOutW
ExtCreateRegion
EnumFontFamiliesExW
EndPath
BeginPath

ole32

OleUninitialize
OleInitialize
GetClassFile
CreateStreamOnHGlobal
CoUnmarshalInterface
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoSuspendClassObjects
CoRevokeClassObject
CoRegisterMessageFilter
CoRegisterClassObject
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoGetInterfaceAndReleaseStream
CoFreeUnusedLibraries
CoCreateInstance
StringFromGUID2
CLSIDFromString

msvcrt

malloc
free
exit
_initterm
_exit
_except_handler3
_controlfp
_cexit
_c_exit
_adjust_fdiv
_acmdln
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
_XcptFilter
sprintf

Sections

.rdata4
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60b2d81d6c56ae2c6312ef8328052235

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

msvcrt

Sections

.rdata4 Size: 23KB - Virtual size: 22KB

.rdata3 Size: 1024B - Virtual size: 1000B

.text Size: 29KB - Virtual size: 28KB

.data Size: 128KB - Virtual size: 128KB

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 2KB - Virtual size: 1KB

.rdata4
Size: 23KB - Virtual size: 22KB

.rdata3
Size: 1024B - Virtual size: 1000B

.text
Size: 29KB - Virtual size: 28KB

.data
Size: 128KB - Virtual size: 128KB

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 2KB - Virtual size: 1KB