c3bd568e51a105380443c9395feaf290_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c3bd568e51a105380443c9395feaf290_JaffaCakes118
Size

200KB
MD5

c3bd568e51a105380443c9395feaf290
SHA1

a328c4caea0709915e8bdcbc7bc8a2ccd32e512d
SHA256

dbc4d11d5b0218ced07d9acc2df674a88d4d18093658e4e93df619d050e4c17f
SHA512

b941d20665a769821b60eb111d0fbd3a1f7a496f59f6e08aa7ece266cfcc0309ccd4d049ced764005927ece6dde5fa882b952917dfc0cebe37aa510f5d7cfaca
SSDEEP

3072:f5IGQr+QpO1rUXiJqA3NFnIzJ+vLJ4AH3J4AHTxU+OOYcURsNyaqKmwm:xIGQHxXiqA95B4AHZ4AHT+FOYipm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3bd568e51a105380443c9395feaf290_JaffaCakes118

Files

c3bd568e51a105380443c9395feaf290_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8781ca8d8288e3880e88f6f860cd6579

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntW
GetModuleFileNameW
GetCurrentDirectoryW
GlobalAlloc
FreeLibrary
GetProcAddress
GetUserDefaultLangID
GetCurrentThread
WriteFile
SetThreadPriority
GetModuleHandleW
IsBadStringPtrW
IsBadWritePtr
IsBadReadPtr
GetStartupInfoW
lstrcpyW
FindResourceW
LoadResource
LockResource
GlobalHandle
GlobalFree
FreeResource
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
CreateProcessW
CloseHandle
DeleteFileW
WritePrivateProfileStringW
MoveFileW
GetTempPathW
GetFileAttributesW
GetFileSize
CreateFileW
ReadFile
WideCharToMultiByte
WaitForSingleObject
Sleep
MulDiv
GetTickCount
HeapDestroy
SetCurrentDirectoryW
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
lstrlenA
lstrlenW
lstrcpynW

user32

GetClassInfoExW
DefWindowProcW
PostMessageW
SetWindowTextW
RegisterWindowMessageW
RegisterClassExW
DialogBoxIndirectParamW
SetWindowLongW
GetWindow
IsWindow
LoadCursorW
GetWindowTextW
GetWindowTextLengthW
GetWindowLongW
CallWindowProcW
GetSysColor
SetFocus
IsChild
GetFocus
ReleaseDC
GetDC
EndPaint
FillRect
GetClientRect
BeginPaint
SetWindowPos
GetSystemMetrics
PtInRect
DrawTextW
ShowWindow
LoadIconW
GetPropW
RemovePropW
SetPropW
GetForegroundWindow
ClientToScreen
ScreenToClient
TranslateMessage
MoveWindow
OffsetRect
CopyRect
FindWindowW
LoadStringW
GetWindowRect
SystemParametersInfoW
MapWindowPoints
PeekMessageW
DispatchMessageW
SetDlgItemTextW
KillTimer
EnableWindow
EndDialog
SetTimer
GetDlgItem
SendMessageW
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
wsprintfW
CreateWindowExW
DestroyWindow
CreateAcceleratorTableW
GetDesktopWindow
GetParent
GetClassNameW
RedrawWindow

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
CreateSolidBrush
GetObjectW
GetStockObject
GetTextExtentPoint32W
GetTextMetricsW
ExtTextOutW
SetBkColor
SelectObject
SetBkMode
SetTextColor
BitBlt
GetDeviceCaps
DeleteDC

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

ole32

CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLockRunning

oleaut32

VariantClear
SysStringLen
LoadRegTypeLi
SysAllocString
SysAllocStringLen
SysFreeString
OleCreateFontIndirect

wininet

InternetOpenW
InternetSetOptionW
InternetOpenUrlW
HttpQueryInfoW
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetCanonicalizeUrlW

msvcrt

calloc
_wcsicmp
wcsncmp
_except_handler3
wcstok
wcsrchr
malloc
wcscmp
wcscat
_wmkdir
rand
wcscpy
wcslen
memset
strlen
strstr
free
memcmp
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
time
__CxxFrameHandler
_beginthread
_endthread
_wcsdup
_wtoi
swscanf
memmove
wcschr
wcsstr
vswprintf
swprintf
iswdigit
iswspace
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
?terminate@@YAXXZ
_controlfp
_exit

comctl32

InitCommonControlsEx
ord17

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8781ca8d8288e3880e88f6f860cd6579

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

wininet

msvcrt

comctl32

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 47KB - Virtual size: 47KB

.rrdata Size: 76KB - Virtual size: 76KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 47KB - Virtual size: 47KB

.rrdata
Size: 76KB - Virtual size: 76KB