840a78f5e481da5541cba35a8fe7d917_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

840a78f5e481da5541cba35a8fe7d917_JaffaCakes118
Size

384KB
MD5

840a78f5e481da5541cba35a8fe7d917
SHA1

bbd51f16cf571ecf4aca65c02fbbad028a554993
SHA256

6efabcd0e24694197c803dceee5487efa02b19e6f48eec25b8aa7acbb7e476e7
SHA512

fe6b0e0be169a950f0c84081b00a451809adfb7f9b3711b5d808e1b82dd9f6c7e2f97a268893b925619e0741e5768aa62c5ffce0f80a173d081b94d314e17cc9
SSDEEP

6144:DL4hWpVFPk8oxN5r4b1c0mcgAOM1Fn+R0Oupy0NQkHzaJaN0nM2:DL4hWpVFP/o35r2chKjSJ96a40M2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
840a78f5e481da5541cba35a8fe7d917_JaffaCakes118

Files

840a78f5e481da5541cba35a8fe7d917_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0501ba77bceafe83358bade6f6fceb1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutGetNumDevs
waveOutOpen
waveOutReset
waveOutUnprepareHeader

kernel32

RtlUnwind
SetEndOfFile
HeapSize
GetLocaleInfoA
LocalFree
FormatMessageA
GetLastError
FindClose
FindNextFileA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
SetPriorityClass
GetCurrentProcess
InitializeCriticalSection
GlobalLock
GlobalAlloc
Sleep
DeleteCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
CloseHandle
SetFilePointer
MultiByteToWideChar
ReadFile
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0501ba77bceafe83358bade6f6fceb1b

Headers

File Characteristics

Imports

winmm

kernel32

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 68KB - Virtual size: 72KB

.rsrc Size: 76KB - Virtual size: 76KB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 68KB - Virtual size: 72KB

.rsrc
Size: 76KB - Virtual size: 76KB