7547e4e995bdb1e22e7089563047874a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7547e4e995bdb1e22e7089563047874a_JaffaCakes118
Size

2.5MB
MD5

7547e4e995bdb1e22e7089563047874a
SHA1

251ec9070fd68e63a38a07d17a926aff4e67546d
SHA256

143ed04861a2178861f455f1bc8315ff1a6cb05252c1258da13e43bd4347b98c
SHA512

ae4245c67332af712e5e9804c532c3f6df6f27d5856291bcddb3f800a0feab3f3b4858b6bc9e62b45855814db6b3eecfbf43c18a254211a3ee0a9a003bd4f975
SSDEEP

24576:fuOq6oZNWKI2zmJEzJSqdMclkoRWq3ztUNTsSlOb11kmThfEFfK0dM/bAkCzc7lG:CNWeQEzU7c2QDJUVbU1iK2s8KfJoBXZr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7547e4e995bdb1e22e7089563047874a_JaffaCakes118

Files

7547e4e995bdb1e22e7089563047874a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

646b36b477ecd687f453f7c5ed9ad176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

msvfw32

ICInfo
MCIWndCreateA

winmm

mixerGetNumDevs
mixerGetLineControlsA
mixerGetLineInfoA
timeEndPeriod
timeGetTime
mciSendCommandA
mixerOpen
mixerSetControlDetails
timeBeginPeriod
mixerGetControlDetailsA
mciGetErrorStringA
mixerClose

kernel32

_llseek
GetModuleFileNameA
IsDBCSLeadByte
SetLastError
GetProcAddress
CompareStringA
_lread
ReleaseSemaphore
SetThreadPriority
SetPriorityClass
GetPriorityClass
GetThreadPriority
FindResourceA
GlobalHandle
GlobalAlloc
MapViewOfFile
LoadResource
LockResource
LoadLibraryA
GetTempFileNameA
GetTempPathA
VirtualFree
WinExec
FreeEnvironmentStringsW
GetEnvironmentStrings
OpenFile
GetCurrentProcess
GetModuleHandleA
GetCurrentThread
GlobalLock
GetEnvironmentStringsW
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
CompareStringW
GlobalUnlock
GlobalReAlloc
_lclose
GlobalFree
_hread
FindNextFileA
OutputDebugStringA
DeleteFileA
FindFirstFileA
GetDateFormatA
GetTimeFormatA
GetLastError
FindClose
CreateMutexA
GetVolumeInformationA
ReleaseMutex
GetDriveTypeA
FreeLibrary
MulDiv
CloseHandle
CreateFileMappingA
GlobalMemoryStatus
GetCurrentDirectoryA
GetStartupInfoA
SetStdHandle
SetEndOfFile
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
CreateFileA
UnmapViewOfFile
WaitForSingleObject
CreateSemaphoreA
GetCommandLineA
SetEnvironmentVariableA
GetStringTypeW
GetFullPathNameA
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
TerminateProcess
ExitProcess
WriteFile
SetFilePointer
GetFileType
ReadFile
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
IsBadCodePtr
HeapAlloc
VirtualAlloc
VirtualLock
VirtualQuery
GetVersion
RaiseException
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA

user32

GetWindowThreadProcessId
InvalidateRect
GetParent
GetWindowTextA
SetCursor
SetClassLongA
GetCursorPos
ScreenToClient
FillRect
ValidateRect
GetUpdateRect
IsIconic
SetForegroundWindow
GetLastActivePopup
BringWindowToTop
GetDC
ReleaseDC
GetAsyncKeyState
DefWindowProcA
GetKeyState
GetClientRect
SetWindowPos
UpdateWindow
LoadIconA
RegisterClassA
CharUpperA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
DestroyWindow
FindWindowA
SendMessageA
SystemParametersInfoA
ShowWindow
SetFocus
SetTimer
LoadCursorA
IsWindow
PostQuitMessage
KillTimer
SetWindowTextA
SetCapture
ReleaseCapture
GetCapture
SetWindowLongA
PostMessageA
GetActiveWindow
WinHelpA
GetKeyboardState
GetKeyNameTextA
MapVirtualKeyA
wsprintfA
DrawTextA
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
GetCaretBlinkTime
DrawTextExA
CallWindowProcA
MoveWindow
MessageBeep
GetWindowLongA
SetSysColors
GetSysColor
MessageBoxA
LoadStringA
SetRect
ClientToScreen
GetWindowRect
GetSystemMetrics
GetForegroundWindow
CreateWindowExA
GetFocus
SetCursorPos

gdi32

GetDeviceCaps
SelectObject
CreateFontIndirectA
GetStockObject
RealizePalette
SelectPalette
DeleteDC
CreateICA
CreatePalette
GetObjectA
GetPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
GetSystemPaletteEntries
SelectClipRgn
ResizePalette
SetBkMode
TextOutA
SetTextColor
GetTextExtentPoint32A
SetBkColor
CreateRectRgn
MoveToEx
SetTextAlign
LineTo
DeleteObject
CreatePen
GetTextMetricsA

dplayx

ord4
ord2
ord1

dsound

ord1

ddraw

DirectDrawCreate

imm32

ImmAssociateContext
ImmGetContext
ImmGetOpenStatus
ImmSetOpenStatus
ImmNotifyIME
ImmGetDefaultIMEWnd
ImmReleaseContext

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

ole32

CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize

wsock32

gethostname
WSAStartup
gethostbyname
WSACleanup

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

THIS_COD
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

THIS_DAT
Size: 4KB - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Inf32Dat
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

646b36b477ecd687f453f7c5ed9ad176

Headers

File Characteristics

Imports

version

msvfw32

winmm

kernel32

user32

gdi32

dplayx

dsound

ddraw

imm32

advapi32

ole32

wsock32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

THIS_COD Size: 48KB - Virtual size: 46KB

.rdata Size: 196KB - Virtual size: 195KB

.data Size: 88KB - Virtual size: 1.2MB

THIS_DAT Size: 4KB - Virtual size: 188B

Inf32Dat Size: 44KB - Virtual size: 43KB

.rsrc Size: 48KB - Virtual size: 45KB

.ddata Size: 15KB - Virtual size: 15KB

.text
Size: 2.1MB - Virtual size: 2.1MB

THIS_COD
Size: 48KB - Virtual size: 46KB

.rdata
Size: 196KB - Virtual size: 195KB

.data
Size: 88KB - Virtual size: 1.2MB

THIS_DAT
Size: 4KB - Virtual size: 188B

Inf32Dat
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 48KB - Virtual size: 45KB

.ddata
Size: 15KB - Virtual size: 15KB