83293fe732ef24083b8e9b1d3d0d6abf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

83293fe732ef24083b8e9b1d3d0d6abf_JaffaCakes118
Size

320KB
MD5

83293fe732ef24083b8e9b1d3d0d6abf
SHA1

3e45295edd58e775c0e8fe356c170dbebc7dde55
SHA256

9d722f9ab838b465b769b2961518edffe67d195e16957018db14e7095ede1c8e
SHA512

2ed9444f0289a1260b8881c6a901fb33807468b8a31acbe8733529dfc2315c6a785c951f1277e2a6792faf9d6e401379c0a63f82c405568352f5d29d1cba0622
SSDEEP

6144:sIyEr1fTcAYfph1u79Ize0ZPi92PnJhU8oCacVE9Agh1MJM:sIneRh2Gz5ZPi9WnxacVEqghj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83293fe732ef24083b8e9b1d3d0d6abf_JaffaCakes118

Files

83293fe732ef24083b8e9b1d3d0d6abf_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4f51953d9e99579a5cc197149bedca98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

mmioClose
midiOutGetDevCapsW
midiConnect
mmioOpenW
midiInReset
midiInGetNumDevs
mciDriverYield
mmioRead
mciGetDriverData
joySetCapture
midiOutOpen
GetDriverModuleHandle
waveInGetNumDevs
midiStreamOpen
midiOutGetDevCapsA
mmioDescend
joyGetNumDevs
auxGetDevCapsA
midiInStart
waveOutUnprepareHeader
mod32Message
aux32Message
mmTaskYield
mixerGetLineControlsA
mixerClose
auxGetDevCapsW
joyGetPos
midiInAddBuffer
mmioInstallIOProcA
midiStreamStop
mmioStringToFOURCCW
WOW32ResolveMultiMediaHandle
mciGetDeviceIDW
PlaySound
mmTaskBlock
waveOutSetPlaybackRate
mmDrvInstall
waveOutGetPlaybackRate
waveInReset
mixerGetLineInfoW
mmioAdvance
mmioOpenA
mixerMessage
waveInGetDevCapsW
midiOutGetErrorTextW
waveInPrepareHeader
waveOutSetVolume
timeGetSystemTime
auxOutMessage
mixerGetControlDetailsA
midiOutClose
waveOutGetVolume
midiInGetErrorTextA
CloseDriver
mmioGetInfo
waveOutGetPosition
midiInUnprepareHeader
midiInPrepareHeader
OpenDriver
mixerGetControlDetailsW
joyGetThreshold
midiStreamClose
mmioAscend
auxGetNumDevs
waveInMessage
mciSendCommandW
midiStreamRestart
NotifyCallbackData
mmioFlush
joyGetDevCapsW

kernel32

GetCurrentProcessId
FindNextFileW
GetPriorityClass
GetTickCount
EraseTape
FindVolumeMountPointClose
GetLocaleInfoW
FindFirstVolumeMountPointW
BackupWrite
CreateFileW
GetVersionExA
SetTapeParameters
CompareStringW
ExpandEnvironmentStringsW
ExitThread
LoadLibraryA
CreateDirectoryW
FileTimeToLocalFileTime
BackupRead
SetLastError
SetFilePointer
GetTapeParameters
InitializeCriticalSection
FindFirstFileW
VirtualAlloc
SystemTimeToTzSpecificLocalTime
GetLocalTime
FindNextVolumeMountPointW
GetFileAttributesW
VirtualFree
SetFileAttributesW
GetCurrentDirectoryW
GetComputerNameW
HeapFree
TerminateThread
LocalAlloc
GetCurrentProcess
GetSystemTimeAsFileTime
GetCompressedFileSizeW
EnterCriticalSection
LoadLibraryW
SetEvent
PrepareTape
HeapAlloc
SetEndOfFile
GetFileInformationByHandle
GetWindowsDirectoryW
LocalFree
FreeLibrary
BackupSeek
UnhandledExceptionFilter
FileTimeToSystemTime
FindClose
WideCharToMultiByte
CreateEventW
CloseHandle
DeleteFileW
GetLogicalDriveStringsW
VerSetConditionMask
GetTapeStatus
SetPriorityClass
RemoveDirectoryW
LeaveCriticalSection

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f51953d9e99579a5cc197149bedca98

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

Sections

.text Size: 179KB - Virtual size: 179KB

.data Size: 54KB - Virtual size: 54KB

.rsrc Size: 85KB - Virtual size: 604KB

.text
Size: 179KB - Virtual size: 179KB

.data
Size: 54KB - Virtual size: 54KB

.rsrc
Size: 85KB - Virtual size: 604KB