06dbc4b7fbdbe39e45a70934a52577cb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

06dbc4b7fbdbe39e45a70934a52577cb_JaffaCakes118
Size

182KB
MD5

06dbc4b7fbdbe39e45a70934a52577cb
SHA1

ae993e2d0b918cc072bb253de214945c3e17250a
SHA256

0dab83b85f8ed9d73cd5e4e9b65609e8728cdcf092f787c7e2014035b40f5737
SHA512

9bd33fa4d0fcaa595bf0c3ddbdb23b2ed1ac911bfdba1686c53b28079d3f6b4deac78d99e678f2cb15f23b25274cd11151ac210c0e5fd33ef7577e7c327e4870
SSDEEP

3072:ttfmC8yu0IG8IEUy46l+tTzN0IT7lqsWFDVey6TKsyB5nM3Z7:ttuty7hyR6dXRqlVd1Bep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06dbc4b7fbdbe39e45a70934a52577cb_JaffaCakes118

Files

06dbc4b7fbdbe39e45a70934a52577cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14f764619f03bf1f734496ff4fff61f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
ClearCommBreak
FlushViewOfFile
SetEvent
GetProcessId
GetLocalTime
GetCommandLineA
Process32Next
SetLocaleInfoA
WriteConsoleOutputA
VirtualAllocEx
GetShortPathNameA
FreeEnvironmentStringsA
ReadConsoleA
GetExitCodeThread
FindNextVolumeA
HeapLock
IsValidCodePage
TransmitCommChar
GetDefaultCommConfigA
CreatePipe
ChangeTimerQueueTimer
GetFileAttributesExA
SetCommConfig
IsProcessorFeaturePresent
ReleaseMutex
UpdateResourceA
Heap32First
ReadConsoleOutputCharacterA
GetEnvironmentVariableA
GetProcessHeap
VirtualAlloc
SetProcessWorkingSetSize
GetProfileSectionA
CreateMutexA
GetModuleHandleA
GetCurrentThread
GetEnvironmentStringsA
TlsFree

user32

DestroyCaret
GetLastInputInfo
DrawTextExA
DeregisterShellHookWindow
RegisterSystemThread
CharUpperBuffW
LoadImageA
AnimateWindow
OffsetRect
GetComboBoxInfo
ChangeClipboardChain
GetCursorFrameInfo
IsWindowEnabled
RegisterClassExA
GetUpdateRgn
SendIMEMessageExA
DrawIconEx
ReleaseCapture
GetSubMenu
MapVirtualKeyA
ChildWindowFromPoint
IsWindow
GetWindow
ArrangeIconicWindows
GetClassLongA
OpenIcon
InsertMenuItemW
SetRectEmpty
CloseWindowStation
DialogBoxParamA
FillRect
SendNotifyMessageA
LoadImageA
GetInputDesktop
InflateRect
OemToCharBuffA
BeginDeferWindowPos
GetWinStationInfo

hid

HidD_GetPhysicalDescriptor
HidD_SetNumInputBuffers

dsound

DirectSoundCreate

Exports

Exports

Vhulgcslni
AddSriugglo
Nijkeyqv
ReadPyhkmofx
Hsryjhauj
Xegdkjp
IsFmhhlalwwe
Sfbveuwrea
OpenAwntkaaqnl
Ibwgremg
Nvfbljkva
AddFyjpcbncyaw
OpenTqyhfxol
Gwitusk
Pfnckkiqn
Oinxpjqje
Wryslplfpy
Rndibsmpux
Ivhypqoro
Unhpajxxd
CreateIsnkegc
Yedykugg
BeginWjjktnll
CreateWglhtujcpj
IsGqjvncumk
AddEcwvyug
Idrmquojgg
Ilcoyodx
SetObwdaeuvl
SetSnjkrmgsmly
Bbkpnhgkt
WriteGkqrkpg

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14f764619f03bf1f734496ff4fff61f6

Headers

File Characteristics

Imports

kernel32

user32

hid

dsound

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 105KB - Virtual size: 105KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 61KB - Virtual size: 60KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 105KB - Virtual size: 105KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 61KB - Virtual size: 60KB

.reloc
Size: 3KB - Virtual size: 2KB