07e65dc4fa8200bc3c20168f503cefe2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

07e65dc4fa8200bc3c20168f503cefe2_JaffaCakes118
Size

320KB
MD5

07e65dc4fa8200bc3c20168f503cefe2
SHA1

0cd7dbc517aa98db20e6eec7f781722d30c498fd
SHA256

bd8c9d1d0f0c2ff55c9e98124aee18f5011770d0c94a00050f6d8722e80cd909
SHA512

277ffe1c19c5c52503ab21001d5eae6235d73d06d626fe2ea8c7a13e1863c59f103b9065cbd5ea3711bffc45e6fe79afeb14920ba631f7aaa052f6da04f92d16
SSDEEP

6144:sIyEr1fTcAYfph1u79Ize0ZPi92PnJhU8oCacVE9+fNxjRa:sIneRh2Gz5ZPi9WnxacVEcRa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e65dc4fa8200bc3c20168f503cefe2_JaffaCakes118

Files

07e65dc4fa8200bc3c20168f503cefe2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4f51953d9e99579a5cc197149bedca98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

mmioClose
midiOutGetDevCapsW
midiConnect
mmioOpenW
midiInReset
midiInGetNumDevs
mciDriverYield
mmioRead
mciGetDriverData
joySetCapture
midiOutOpen
GetDriverModuleHandle
waveInGetNumDevs
midiStreamOpen
midiOutGetDevCapsA
mmioDescend
joyGetNumDevs
auxGetDevCapsA
midiInStart
waveOutUnprepareHeader
mod32Message
aux32Message
mmTaskYield
mixerGetLineControlsA
mixerClose
auxGetDevCapsW
joyGetPos
midiInAddBuffer
mmioInstallIOProcA
midiStreamStop
mmioStringToFOURCCW
WOW32ResolveMultiMediaHandle
mciGetDeviceIDW
PlaySound
mmTaskBlock
waveOutSetPlaybackRate
mmDrvInstall
waveOutGetPlaybackRate
waveInReset
mixerGetLineInfoW
mmioAdvance
mmioOpenA
mixerMessage
waveInGetDevCapsW
midiOutGetErrorTextW
waveInPrepareHeader
waveOutSetVolume
timeGetSystemTime
auxOutMessage
mixerGetControlDetailsA
midiOutClose
waveOutGetVolume
midiInGetErrorTextA
CloseDriver
mmioGetInfo
waveOutGetPosition
midiInUnprepareHeader
midiInPrepareHeader
OpenDriver
mixerGetControlDetailsW
joyGetThreshold
midiStreamClose
mmioAscend
auxGetNumDevs
waveInMessage
mciSendCommandW
midiStreamRestart
NotifyCallbackData
mmioFlush
joyGetDevCapsW

kernel32

GetCurrentProcessId
FindNextFileW
GetPriorityClass
GetTickCount
EraseTape
FindVolumeMountPointClose
GetLocaleInfoW
FindFirstVolumeMountPointW
BackupWrite
CreateFileW
GetVersionExA
SetTapeParameters
CompareStringW
ExpandEnvironmentStringsW
ExitThread
LoadLibraryA
CreateDirectoryW
FileTimeToLocalFileTime
BackupRead
SetLastError
SetFilePointer
GetTapeParameters
InitializeCriticalSection
FindFirstFileW
VirtualAlloc
SystemTimeToTzSpecificLocalTime
GetLocalTime
FindNextVolumeMountPointW
GetFileAttributesW
VirtualFree
SetFileAttributesW
GetCurrentDirectoryW
GetComputerNameW
HeapFree
TerminateThread
LocalAlloc
GetCurrentProcess
GetSystemTimeAsFileTime
GetCompressedFileSizeW
EnterCriticalSection
LoadLibraryW
SetEvent
PrepareTape
HeapAlloc
SetEndOfFile
GetFileInformationByHandle
GetWindowsDirectoryW
LocalFree
FreeLibrary
BackupSeek
UnhandledExceptionFilter
FileTimeToSystemTime
FindClose
WideCharToMultiByte
CreateEventW
CloseHandle
DeleteFileW
GetLogicalDriveStringsW
VerSetConditionMask
GetTapeStatus
SetPriorityClass
RemoveDirectoryW
LeaveCriticalSection

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f51953d9e99579a5cc197149bedca98

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

Sections

.text Size: 179KB - Virtual size: 179KB

.data Size: 54KB - Virtual size: 54KB

.rsrc Size: 85KB - Virtual size: 604KB

.text
Size: 179KB - Virtual size: 179KB

.data
Size: 54KB - Virtual size: 54KB

.rsrc
Size: 85KB - Virtual size: 604KB