0e819af79a77dd7d19ddc27e17dde4c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e819af79a77dd7d19ddc27e17dde4c3_JaffaCakes118
Size

330KB
MD5

0e819af79a77dd7d19ddc27e17dde4c3
SHA1

76dc9c15c84610cdb490d199750088a32bc979f2
SHA256

73e663914ace2d119e02b39e4a841b96b11c5308feeca56d5ae5a7b65e7df265
SHA512

35d46c966087f1fd9649c92774903c11bb74238c24c654b0951fd017c487c1f975a004707c4fbdc56bc6d0c337777184a29a7dca9df0070344c30d889dec9187
SSDEEP

6144:V3Zq5w6w9ybFybQXqQHX4glKFUfWr0MSdJtjyYsCzZ5JNtCgpU:CSXT6TIglKFUR/JEYhX79pU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e819af79a77dd7d19ddc27e17dde4c3_JaffaCakes118

Files

0e819af79a77dd7d19ddc27e17dde4c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcffb876ec9a76ebce3b177895268fd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

user32

GetKeyboardType
CreateWindowExA

advapi32

RegSetValueExW
RegQueryValueExA

oleaut32

CreateErrorInfo
SafeArrayPtrOfIndex
SysFreeString

version

VerQueryValueA

gdi32

TranslateCharsetInfo
UnrealizeObject

ole32

CreateStreamOnHGlobal
CoTaskMemFree

comctl32

ImageList_SetIconSize

imm32

ImmSetCompositionWindow

winspool.drv

OpenPrinterA
DEVICECAPABILITIES

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
ShellExecuteExA

wininet

InternetSetOptionA

comdlg32

PageSetupDlgA

oledlg

OleUIObjectPropertiesA

wsock32

WSACleanup

winmm

timeSetEvent

Exports

Exports

av_free
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcffb876ec9a76ebce3b177895268fd1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

imm32

winspool.drv

shell32

wininet

comdlg32

oledlg

wsock32

winmm

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 24KB - Virtual size: 1.7MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 24KB - Virtual size: 1.7MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 24KB