44e30f5afbc6b2e103252d5cfbd6a09d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

44e30f5afbc6b2e103252d5cfbd6a09d_JaffaCakes118
Size

156KB
MD5

44e30f5afbc6b2e103252d5cfbd6a09d
SHA1

9c2ea54ef35ef72d1c38d9dd591b9573bcb5335f
SHA256

136176617e59a8f17304fdf7bc8cea4ce071ac865ca59f801d6db4e4a05d1dca
SHA512

61813e4aa891f6339cecbdce9b34e151c5b4e3c514493f41ca89ff573e2b9bb675e36b5c051aec3b13d7ac630ebc7cdb6c731ed43abd608b20ba1b58da16f2fd
SSDEEP

3072:o1LK6qYxwGAJfzQsJRgbWW1s1T1Nr+rT5uUlMSp5VQ+5Fh0OS8:o1nqS+hcs1xNr+rTFlMSnVQ+xS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44e30f5afbc6b2e103252d5cfbd6a09d_JaffaCakes118

Files

44e30f5afbc6b2e103252d5cfbd6a09d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88c5dba15a684bfeffdb45a77c4be316

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ord528
ord316
ord522
ord840
ord879
ord526
ord239
ord857
ord373
ord336
ord909
ord614
ord433
ord436
ord876
ord130
ord334
ord240
ord896
ord183
ord266
ord785
ord518
ord337
ord432
ord351
ord710
ord430
ord520
ord585
ord589
ord247
ord254
ord241
ord579
ord409
ord832
ord841
ord50
ord109
ord476
ord934
ord940
ord914
ord943
ord477
ord949
ord458
ord224
ord584
ord598
ord243
ord405
ord396
ord565
ord566
ord516
ord375

user32

ord472
ord444
ord14
ord201
ord28
ord729
ord367
ord641
ord227
ord435
ord404
ord635
ord275
ord276
ord599
ord268
ord195
ord677
ord595
ord159
ord152
ord644
ord97
ord438
ord596
ord420
ord197
ord274
ord572
ord446
ord256
ord199
ord269
ord555
ord457
ord350
ord477
ord452
ord346

gdi32

ord141
ord81
ord437
ord569
ord587
ord573
ord406
ord46
ord144
ord527
ord586
ord45
ord591

comdlg32

ord110

shell32

ord273
ord313

avifil32

AVIStreamGetFrameOpen
AVIFileGetStream
AVIFileInit
AVIFileExit
AVIStreamSampleToTime
AVIStreamGetFrameClose
AVIFileRelease
AVIFileOpenA
AVIFileInfoA
AVIStreamRead
AVIStreamGetFrame
AVIStreamInfoA
AVIStreamReadFormat
AVIStreamTimeToSample
AVIStreamLength
AVIStreamStart

comctl32

ord17
ord22

msacm32

acmStreamUnprepareHeader
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamClose
acmStreamConvert

winmm

ord67

encmpa

ord1
ord6
ord9
ord8
ord7
ord5
ord4
ord2
ord3

encodem1v

ord1
ord2
ord3

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

88c5dba15a684bfeffdb45a77c4be316

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

avifil32

comctl32

msacm32

winmm

encmpa

encodem1v

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 96KB - Virtual size: 96KB