3d7f4d03d971f607acbdd276eac61162_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3d7f4d03d971f607acbdd276eac61162_JaffaCakes118
Size

191KB
MD5

3d7f4d03d971f607acbdd276eac61162
SHA1

512b2e3f282056fa58d616963e8fb0e24e788270
SHA256

d58611f29019e870e6bbebadb86919cdba6f582c9422d4d11c322f104fa32ca2
SHA512

363a548b0499da9d44191a2917681cc4a34dad1a04b48ac2b73f4f23f763ef6b84a80bd752464e57abb9a1091b9844fba3f3f72eb0da8aa32c2d304fd4b73493
SSDEEP

3072:fPtLAt7h4nwCpf8TtWGMxKAn4PM4RTDIwRA9NticCxIp4lkEZl+d6m:fRAtIwCpUzP24EE3RA9NsP9zb+T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d7f4d03d971f607acbdd276eac61162_JaffaCakes118

Files

3d7f4d03d971f607acbdd276eac61162_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54703c7aae6acfebdc1b029576011e2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

SetTapePosition
FindClose
ClearCommError
InterlockedExchange
GetVersion
GetCurrentProcessId
EnumResourceNamesA
Sleep
GetLocalTime
FatalExit
GetWindowsDirectoryA
FindFirstFileA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

advapi32

RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

ole32

CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

winmm

mciSendCommandA
sndPlaySoundA

gdi32

SaveDC
CreateCompatibleDC
SelectObject
TextOutA
DeleteObject
CreateRectRgn
EnumFontFamiliesExA
Rectangle
RestoreDC
CreateSolidBrush
DeleteDC
GetObjectA
SetTextColor
CreateFontIndirectA
DeleteMetaFile
BitBlt
GetTextExtentPoint32A
GetStockObject
GetDeviceCaps
SetBkMode
CreateCompatibleBitmap

user32

MoveWindow
GetWindowLongA
GetSysColor
FillRect
SetWindowLongA
ReleaseDC
SetCursor
SetWindowPos
ReleaseCapture
GetDlgItem
GetDC
GetWindowInfo
LoadCursorA
IsWindow
SetCapture

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54703c7aae6acfebdc1b029576011e2e

Headers

File Characteristics

Imports

version

kernel32

shell32

advapi32

ole32

winmm

gdi32

user32

oleacc

Sections

.text Size: 161KB - Virtual size: 161KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 26KB - Virtual size: 25KB

.lib Size: 512B - Virtual size: 228KB

.text
Size: 161KB - Virtual size: 161KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 26KB - Virtual size: 25KB

.lib
Size: 512B - Virtual size: 228KB