6c3d3f4b43fda4d7d2424c6d3dda2403_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6c3d3f4b43fda4d7d2424c6d3dda2403_JaffaCakes118
Size

102KB
MD5

6c3d3f4b43fda4d7d2424c6d3dda2403
SHA1

1f84c5123f0e804ae1fc4ba47b535514445a9f53
SHA256

8de145886c6d6abd19d5195c83b720c76806cb686cc90d3e256765f5383cf42e
SHA512

ace9ad8f879a7416df8223b40d7e3d735a48c91b227753f9c5f43d6e0e2e93ad4910d8592712c81ffa2a066931dd1c752aae954cd45feb807bfe78a38bd06658
SSDEEP

3072:ng0usDc7GAY11gWq7WtusTDmUY8ux4N56ruX17r1s:ngwcSPPgWqOusTDdlXiuX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c3d3f4b43fda4d7d2424c6d3dda2403_JaffaCakes118

Files

6c3d3f4b43fda4d7d2424c6d3dda2403_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87ce4a6875c65df7f6282c4c0ad41c4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_purecall
wcslen
_except_handler3
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

lstrlenA
WideCharToMultiByte
MulDiv
lstrlenW
lstrcpyA
WaitForSingleObject
GlobalAlloc
GetSystemTimeAsFileTime
CloseHandle
lstrcmpiW
LoadLibraryW
CreateThread
LeaveCriticalSection
ResetEvent
SetEndOfFile
HeapAlloc
InterlockedDecrement
GetQueuedCompletionStatus
MultiByteToWideChar
GetFullPathNameW
SetUnhandledExceptionFilter
ReadFile
DeleteCriticalSection
PostQueuedCompletionStatus
VirtualFree
GetPrivateProfileStringW
GetFileSize
GlobalMemoryStatus
CreateSemaphoreW
EnterCriticalSection
GetSystemInfo
GetCurrentProcess
IsBadWritePtr
FreeLibrary
GlobalHandle
GetFileAttributesW
GetThreadPriority
lstrcmpW
SetFilePointer
GetEnvironmentStringsW
GetProfileIntA
WriteFile
CreateIoCompletionPort
ReleaseSemaphore
QueryPerformanceCounter
GetLastError
GetTickCount
GetCurrentProcessId
GlobalFree
lstrcpynW
GlobalLock
SetThreadPriority
WaitForMultipleObjects
IsBadHugeReadPtr
CreateEventW
SetEvent
IsBadCodePtr
GetCurrentThread
GetSystemDefaultLangID
InterlockedExchange
GetProcessHeap
lstrcpyW
HeapFree
DeleteFileW
GetDiskFreeSpaceW
GetStartupInfoA
IsBadReadPtr
InitializeCriticalSection
InterlockedIncrement
GetModuleFileNameA
CreateFileW
GlobalUnlock
GetVersionExW

user32

EnableWindow
DestroyWindow
InvalidateRect
GetAsyncKeyState
GetDlgItem
LoadStringW
LoadCursorW
GetDesktopWindow
IsWindowVisible
PeekMessageW
CreateDialogParamW
wsprintfW
GetDlgItemInt
SetWindowLongW
CheckRadioButton
ShowWindow
SetDlgItemTextW
DefWindowProcW
SetDlgItemInt
GetWindowRect
IsRectEmpty
CheckDlgButton
ReleaseDC
SendMessageW
TranslateMessage
GetClientRect
GetWindowLongW
ClientToScreen
MoveWindow
SetCursor
DispatchMessageW
GetDC
IsWindow

advapi32

RegSetValueExW
RegOpenKeyW
RegSetValueW
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegEnumKeyW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW

winmm

waveInUnprepareHeader
waveInPrepareHeader
waveInGetDevCapsW
waveInStop
mixerGetControlDetailsW
OpenDriver
CloseDriver
waveInOpen
mixerSetControlDetails
mixerGetID
mixerGetLineControlsW
mixerGetLineInfoW
waveInReset
SendDriverMessage
mixerClose
mixerOpen
waveInAddBuffer
waveInClose
waveInStart

gdi32

GetTextExtentPoint32W
SelectObject
GetStockObject
GetObjectW
GetPaletteEntries
PatBlt

msvfw32

ICDecompress
ICClose
ICGetInfo
ICLocate
ICCompress
ICSendMessage
ICOpen

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemFree

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87ce4a6875c65df7f6282c4c0ad41c4b

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

winmm

gdi32

msvfw32

ole32

version

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 17KB - Virtual size: 115KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 17KB - Virtual size: 115KB

.rsrc
Size: 23KB - Virtual size: 23KB