147d09bf33266b88315dd6497f8cf743_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

147d09bf33266b88315dd6497f8cf743_JaffaCakes118
Size

940KB
MD5

147d09bf33266b88315dd6497f8cf743
SHA1

3a24c29bbef8077bde93739ed36cbd1b650859ba
SHA256

a3270521f0115a1fa3691508245275e71f5f98282040de75f3ec1968bd14cd8f
SHA512

619749e589e6353ea0bc40c72d7ab549106fc90217f939b307228d493f1d2233f614d9cb930b7647f9f18ba5d6d171edd731cb42f38872d6c3b7fee9e807cd58
SSDEEP

12288:3DEGcHkuPIfrp9z/eV7D2SEH24zukSR7Grlgph5NBeC+4gK/1Q2ds:A61EV7DSHIkmGrlgRNBeR5U1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147d09bf33266b88315dd6497f8cf743_JaffaCakes118

Files

147d09bf33266b88315dd6497f8cf743_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8aea4b4afb2b4e6675ca0071aa2977ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\Yura\Мои документы\Visual Studio Projects\Kg\Release\Kg.pdb

Imports

shell32

ShellExecuteA
SHCreateDirectoryExA
SHGetFolderPathA

kernel32

HeapSize
GetLastError
WriteFile
CloseHandle
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
ReadFile
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
GetACP
GetCurrentProcess
GetCPInfo
GetModuleFileNameA
CreateFileA
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetEndOfFile
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
TerminateProcess
GetLocalTime
GetLocaleInfoW
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
UnmapViewOfFile
GetOEMCP
HeapReAlloc
GetModuleFileNameW
GetVersionExA
CreateFileW
CreateFileMappingA
MapViewOfFile
GetFileSize
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
RtlUnwind
RaiseException
FindFirstFileA
FindNextFileA
FindClose
QueryPerformanceFrequency
QueryPerformanceCounter
SetStdHandle

user32

GetMessageA
SetWindowLongA
SetWindowPos
AdjustWindowRect
GetSystemMetrics
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
UpdateWindow
SetClassLongA
DestroyWindow
ShowCursor
TranslateMessage
PeekMessageA
DispatchMessageA
ShowWindow
DefWindowProcA
MessageBoxA
SetCapture
GetCursorPos
ScreenToClient
SetRect

gdi32

GetStockObject

ole32

CoInitialize
CoCreateInstance
CoUninitialize

d3d8

Direct3DCreate8

bass

BASS_ChannelSetPosition
BASS_MusicFree
BASS_GetVersion
BASS_Init
BASS_Free
BASS_Start
BASS_Pause
BASS_Update
BASS_SampleLoad
BASS_SampleStop
BASS_SampleGetChannel
BASS_ChannelPlay
BASS_SampleFree
BASS_SetConfig
BASS_MusicLoad

shlwapi

PathAppendA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 684KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8aea4b4afb2b4e6675ca0071aa2977ff

Headers

File Characteristics

PDB Paths

Imports

shell32

kernel32

user32

gdi32

ole32

d3d8

bass

shlwapi

advapi32

Sections

.text Size: 684KB - Virtual size: 681KB

.rdata Size: 104KB - Virtual size: 101KB

.data Size: 20KB - Virtual size: 287KB

.data1 Size: 4KB - Virtual size: 2KB

.rsrc Size: 124KB - Virtual size: 124KB

.text
Size: 684KB - Virtual size: 681KB

.rdata
Size: 104KB - Virtual size: 101KB

.data
Size: 20KB - Virtual size: 287KB

.data1
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 124KB - Virtual size: 124KB