6a0e70ca0a5045ac00ec98b30393b7e2_JaffaCakes118

General

Target

6a0e70ca0a5045ac00ec98b30393b7e2_JaffaCakes118
Size

312KB
MD5

6a0e70ca0a5045ac00ec98b30393b7e2
SHA1

c7eaeaac9363b6f6d475398347f24cf6441497d2
SHA256

c4ca732aceadfec3bbbf978e58ac22f2de1350cb551e249df0cc11c0a0391f93
SHA512

a76d732cc10741502e1d418ec8a9e7685e18a8f13ee9dcc5e1b7b4c523b5a120bdc1c9b32e6ae6d88a8074b381cb45025f80f4839b9f39c4e8648bbf0e892037
SSDEEP

6144:fzvooPsfEl5w3wYdss8yNc5f8OXdHWv2R+UV+Klt0oOCXd3Dirq:fzvooEUw3wYiJyNcuY2v2R+O+U0oOSdt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0e70ca0a5045ac00ec98b30393b7e2_JaffaCakes118

Files

6a0e70ca0a5045ac00ec98b30393b7e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e618fdb204119b02b810d42df866f04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIFileGetStream
AVIFileRelease
AVIFileInit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIStreamGetFrameOpen
AVIStreamGetFrameClose
AVISaveOptions
AVIFileOpenA
AVIStreamRelease
AVIStreamInfoA
AVIStreamGetFrame
AVIMakeCompressedStream
AVIStreamWrite

user32

GetKeyState
EnumWindowStationsW
CreateWindowExA
DispatchMessageA
GetMessageA
SetCursor
ShowWindow
TranslateMessage
ReleaseCapture
GetClassLongA
SetCapture
GetClassLongW
SetFocus
PeekMessageA
DefWindowProcA
CallWindowProcA
SetWindowTextA
BeginPaint
EndPaint
RegisterClassA

gdi32

SelectObject
SetStretchBltMode
CreateCompatibleDC
DeleteDC
StretchBlt
GetObjectA
SetDIBitsToDevice
FillRgn
GetStockObject
CombineRgn
CreateRectRgn
CreateDIBSection
StretchDIBits
GetCurrentObject
DeleteObject
BitBlt
SetDIBColorTable

kernel32

GetNumberOfConsoleInputEvents
CreateFileMappingA
UnmapViewOfFile
GetFileType
GlobalSize
CreateFileA
ExitProcess
GetFileSize
CloseHandle
MapViewOfFile
Sleep
ReadFile
WriteFile
lstrlenA

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e618fdb204119b02b810d42df866f04

Headers

File Characteristics

Imports

avifil32

user32

gdi32

kernel32

Sections

.text Size: 187KB - Virtual size: 186KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 117KB - Virtual size: 116KB

.edata Size: 5KB - Virtual size: 80KB

.text
Size: 187KB - Virtual size: 186KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 117KB - Virtual size: 116KB

.edata
Size: 5KB - Virtual size: 80KB