76690b6655103728aa4a11e838ffb1ec_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

76690b6655103728aa4a11e838ffb1ec_JaffaCakes118
Size

178KB
MD5

76690b6655103728aa4a11e838ffb1ec
SHA1

6d79e00b18620fb39d2e210b65960ccbe93feddb
SHA256

d8a3786b681a746a936ce53144e61c2944e92edf61da194ccc0552ce1f897bfa
SHA512

5606a705e2b78d8792af920a255684d75d35c83c69979b2f9ace012b7b1ae89cedfccc1e85ea6dbf560834ac58c4f86ebaf4f60f127f2763a0e1efbe89964b5a
SSDEEP

3072:x4GJQ0A/j0+ydVm0sHyQQjRa6gi2vxJmm9wWS92tidEMLOsJ9A8P9oJZFtm1SP3:xxJh2z0S6iiQxAmrpijaYAq9wcSP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76690b6655103728aa4a11e838ffb1ec_JaffaCakes118

Files

76690b6655103728aa4a11e838ffb1ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4daa50a77173ee8b493129d7149a631a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

gdi32

BitBlt
DeleteDC
RestoreDC
SetTextColor
CreateSolidBrush
SaveDC
GetObjectA
SetBkMode
DeleteObject
GetStockObject
DeleteMetaFile
GetTextExtentPoint32A
CreateCompatibleDC
Rectangle
TextOutA
EnumFontFamiliesExA
GetDeviceCaps
CreateRectRgn
CreateFontIndirectA
SelectObject
CreateCompatibleBitmap

user32

FillRect
SetWindowLongA
GetWindowInfo
MoveWindow
SetCursor
ReleaseCapture
GetDlgItem
IsWindow
SetWindowPos
GetDC
ReleaseDC
GetWindowLongA
GetSysColor
LoadCursorA
SetCapture

kernel32

SetTapeParameters
InterlockedExchange
ClearCommError
GetCurrentProcessId
Sleep
GetWindowsDirectoryA
EnumResourceNamesA
GetLocalTime
ExitProcess
GetVersion
FindClose
FindFirstFileA

winmm

mciSendCommandA
sndPlaySoundA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4daa50a77173ee8b493129d7149a631a

Headers

File Characteristics

Imports

advapi32

gdi32

user32

kernel32

winmm

shell32

ole32

oleacc

version

Sections

.text Size: 148KB - Virtual size: 148KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 25KB - Virtual size: 25KB

.lib Size: 512B - Virtual size: 76KB

.text
Size: 148KB - Virtual size: 148KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 25KB - Virtual size: 25KB

.lib
Size: 512B - Virtual size: 76KB