2344f647dfdd467132136184fdbf921e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2344f647dfdd467132136184fdbf921e_JaffaCakes118
Size

739KB
MD5

2344f647dfdd467132136184fdbf921e
SHA1

6197a09f9ac5f9d71c201f41af64d0c2fec4e667
SHA256

b47918ec45f655a62d354ab24376d128f0eb25ac1ef475adc817cef5ab9d7754
SHA512

55574b9011326e63c00c1efacae3aed1f90d45f5a5d9d6fcbb20bb6250816250b6805ca1767c27f76cfbddcca09ec0e3b831ab9ad10c08c1bc625232056babb0
SSDEEP

12288:3FGwwLu+ViYu7jOfSKun5ggl9PvVgdU7OsOih7XW9RpSjsWgnj2Rw:0B1GF5gepvWRshDQfSYWgnj2Rw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2344f647dfdd467132136184fdbf921e_JaffaCakes118

Files

2344f647dfdd467132136184fdbf921e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b8352fce4c30afbeb70cb60ba751e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetOpenEnumA

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

wininet

InternetReadFile

wsock32

WSACleanup

winmm

waveOutWrite

avicap32

capCreateCaptureWindowA

msacm32

acmFormatChooseA

ws2_32

WSAIoctl

Sections

CODE
Size: - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79b8352fce4c30afbeb70cb60ba751e2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

mpr

version

gdi32

comctl32

shell32

wininet

wsock32

winmm

avicap32

msacm32

ws2_32

Sections

CODE Size: - Virtual size: 644KB

DATA Size: - Virtual size: 10KB

BSS Size: - Virtual size: 7KB

.idata Size: - Virtual size: 12KB

.tls Size: - Virtual size: 20B

.rdata Size: - Virtual size: 35B

.vmp0 Size: - Virtual size: 40KB

.rsrc Size: 6KB - Virtual size: 36KB

.vmp1 Size: - Virtual size: 308KB

.vmp2 Size: 731KB - Virtual size: 730KB

.reloc Size: 512B - Virtual size: 244B

CODE
Size: - Virtual size: 644KB

DATA
Size: - Virtual size: 10KB

BSS
Size: - Virtual size: 7KB

.idata
Size: - Virtual size: 12KB

.tls
Size: - Virtual size: 20B

.rdata
Size: - Virtual size: 35B

.vmp0
Size: - Virtual size: 40KB

.rsrc
Size: 6KB - Virtual size: 36KB

.vmp1
Size: - Virtual size: 308KB

.vmp2
Size: 731KB - Virtual size: 730KB

.reloc
Size: 512B - Virtual size: 244B