0872dcc4bec1b2a17b17fab518fdaab5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0872dcc4bec1b2a17b17fab518fdaab5_JaffaCakes118
Size

175KB
MD5

0872dcc4bec1b2a17b17fab518fdaab5
SHA1

58d439d26ac398a20e275a3e2587bc47dca791dc
SHA256

d58c2c3fecffaa65c1cfb95534bc4e2bd17512a20cf2b69e718a91456330bf00
SHA512

8205d970b6d90903ecbfd51530352c7cd718ce99139fadde73ad5fd93fae294ce1f46b60edb203fa6e74b83d96d4d4e7860bbc7762e852f02e8af70dbf1be8cd
SSDEEP

3072:ajeJvTHjs3ypJ7ib5tf5wExuijs1n4oCku7CgveTXs1E7/cjo:keJvTY3EiVEaXjs1n4oCkumgGAjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0872dcc4bec1b2a17b17fab518fdaab5_JaffaCakes118

Files

0872dcc4bec1b2a17b17fab518fdaab5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e96bf47e33b05e5e509173a0211b4e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
InvalidateRect
OffsetRect
GetWindowLongA
ScreenToClient
GetClassLongA
SetFocus
LoadCursorA
ShowWindow
SetWindowTextA
GetClientRect
DispatchMessageA
DestroyWindow
PeekMessageA
GetFocus
EndPaint
MessageBoxA
CreateWindowExA
wvsprintfA
SubtractRect
TranslateMessage
SetCursor
SetWindowLongA
BeginPaint
IsWindow
ReleaseCapture
DefWindowProcA
MoveWindow
LoadIconA
GetWindowRect
RegisterClassA
SendMessageA
GetMessageA
CallWindowProcA
UpdateWindow
GetKeyState
SetCapture

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

kernel32

QueryDosDeviceW
LocalAlloc
ProcessIdToSessionId
DisableThreadLibraryCalls
GetProcessId
Sleep
GetFileSize
ReadFile
CreateFileMappingA
SetFilePointer
CloseHandle
LocalFree
UnmapViewOfFile
EnumResourceTypesA
CreateFileA
WriteFile
ExitProcess
lstrlenA
MapViewOfFile
GlobalAlloc
GlobalSize
GlobalFree

msvfw32

ICDecompress
ICSendMessage
ICOpen
ICClose

comctl32

CreateToolbarEx

avifil32

AVIFileOpenA
AVIStreamRelease
AVIFileInit
AVISaveOptions
AVIStreamGetFrameOpen
AVIFileRelease
AVIStreamGetFrameClose
AVIStreamInfoA
AVIFileCreateStreamA
AVIStreamSetFormat
AVIStreamGetFrame
AVIStreamWrite
AVIFileGetStream
AVIMakeCompressedStream

gdi32

BitBlt
SetStretchBltMode
CreateRectRgn
FillRgn
GetCurrentObject
StretchDIBits
GetStockObject
SetDIBColorTable
SetDIBitsToDevice
CreateCompatibleDC
GetObjectA
CreateDIBSection
CombineRgn
DeleteDC
DeleteObject
SelectObject
StretchBlt

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e96bf47e33b05e5e509173a0211b4e4

Headers

File Characteristics

Imports

user32

avicap32

kernel32

msvfw32

comctl32

avifil32

gdi32

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 68KB - Virtual size: 67KB

.tls Size: 1024B - Virtual size: 372KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 68KB - Virtual size: 67KB

.tls
Size: 1024B - Virtual size: 372KB