452834564c97add40248b4f2ced888c0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

452834564c97add40248b4f2ced888c0_JaffaCakes118
Size

184KB
MD5

452834564c97add40248b4f2ced888c0
SHA1

00430e418f7c6705224414c089c62a9a5eb1ffc3
SHA256

173c9c992d1217b24ef3366d4713f5ae1e57b511eb7a0f52de23807de639729b
SHA512

f501f5f2a956e587c4d401dc73ba3f612b1e841d83b664b24f82184f569a654d20f116737964c535bde171d86050d50d989fa4cc5482b1b940957b8bdf0dab45
SSDEEP

3072:yIkclVwZx7RWtScSg5rh+gn5A2RG+XdnoDB8Ya2YLuLkGU1yo/tW:uclVux7ItTg2RGcI+Ya9QUES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452834564c97add40248b4f2ced888c0_JaffaCakes118

Files

452834564c97add40248b4f2ced888c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e034bf541cf5750a20a1e5303eb4ebb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

mciSendCommandA
sndPlaySoundA

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

FillRect
ReleaseDC
GetSysColor
GetWindowLongA
SetCursor
GetDC
IsWindow
ReleaseCapture
SetWindowPos
GetWindowInfo
LoadCursorA
GetDlgItem
MoveWindow
SetWindowLongA
SetCapture

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegOpenKeyA
RegSetValueExA

kernel32

SetTapeParameters
FindClose
ClearCommError
Sleep
GetCurrentProcessId
GetLocalTime
EnumResourceNamesA
GetWindowsDirectoryA
ExitProcess
InterlockedExchange
GetVersion
FindFirstFileA

gdi32

GetObjectA
GetTextExtentPoint32A
DeleteObject
SetBkMode
CreateCompatibleDC
CreateRectRgn
DeleteMetaFile
RestoreDC
GetStockObject
Rectangle
SelectObject
DeleteDC
GetDeviceCaps
SetTextColor
CreateFontIndirectA
EnumFontFamiliesExA
CreateSolidBrush
BitBlt
TextOutA
SaveDC
CreateCompatibleBitmap

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e034bf541cf5750a20a1e5303eb4ebb

Headers

File Characteristics

Imports

winmm

oleacc

user32

shell32

ole32

version

advapi32

kernel32

gdi32

Sections

.text Size: 152KB - Virtual size: 152KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 28KB - Virtual size: 27KB

.lib Size: 512B - Virtual size: 224KB

.text
Size: 152KB - Virtual size: 152KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 28KB - Virtual size: 27KB

.lib
Size: 512B - Virtual size: 224KB