2eef33b1161a19845b411cfbf771ecf6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2eef33b1161a19845b411cfbf771ecf6_JaffaCakes118
Size

187KB
MD5

2eef33b1161a19845b411cfbf771ecf6
SHA1

ccd555003f8a370c542f19a6fcd0d90a221a59f3
SHA256

d40bca88a3bf969576db650d0b894e1ed63543780f67fa3028b06c2b6c4f4c96
SHA512

77a821261455b6634ad939315b40f55742a7f34f86ad9491fd19ff9d45e1030cfd4da4b54b6add2f4f965d9d3d91f3d80e627842dc39e79b8915fdf6becb813d
SSDEEP

3072:SZ8AZL/T1YtPqk1Njc4e+jvMyiZ81i8qjmfgak05DoA38OiD+pUZgLe0JR8zc7H1:SZ8KT1Ytik1vTJiScAZk05DoAudgLeaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eef33b1161a19845b411cfbf771ecf6_JaffaCakes118

Files

2eef33b1161a19845b411cfbf771ecf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e0240401cfb963a13284a0494b56d5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

winmm

mciSendCommandA
sndPlaySoundA

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

gdi32

CreateFontIndirectA
GetDeviceCaps
CreateRectRgn
EnumFontFamiliesExA
GetStockObject
BitBlt
GetObjectA
DeleteObject
TextOutA
GetTextExtentPoint32A
SetBkMode
DeleteDC
SetTextColor
SaveDC
CreateCompatibleDC
Rectangle
RestoreDC
CreateSolidBrush
SelectObject
DeleteMetaFile
CreateCompatibleBitmap

kernel32

SetTapeParameters
InterlockedExchange
ClearCommError
GetVersion
GetCurrentProcessId
Sleep
EnumResourceNamesA
FindClose
ExitProcess
GetWindowsDirectoryA
GetLocalTime
FindFirstFileA

user32

GetWindowLongA
SetCursor
ReleaseDC
GetSysColor
MoveWindow
SetWindowLongA
GetWindowInfo
SetWindowPos
IsWindow
LoadCursorA
ReleaseCapture
GetDlgItem
GetDC
FillRect
SetCapture

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e0240401cfb963a13284a0494b56d5a

Headers

File Characteristics

Imports

version

shell32

winmm

advapi32

gdi32

kernel32

user32

ole32

oleacc

Sections

.text Size: 163KB - Virtual size: 163KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 19KB

.lib Size: 512B - Virtual size: 224KB

.text
Size: 163KB - Virtual size: 163KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 19KB

.lib
Size: 512B - Virtual size: 224KB