8a22e414b5e709ba2d1358d370cf9e89_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8a22e414b5e709ba2d1358d370cf9e89_JaffaCakes118
Size

328KB
MD5

8a22e414b5e709ba2d1358d370cf9e89
SHA1

e17dee65ee0d356a9b48fe7fdd30f8f92dbcd2e4
SHA256

4ca85784fc7fd6e73547ff5b0ddfcc1e2a3ddb388a25559ef56e0095e1fdba58
SHA512

726f37b4cb0e3e574a356bb985516c47ad51f2eb9c7679d731142cb21f9b8b17ed3550e9a8ba04f9fe4dcde710d34bedd223bed60600ff2a4ee4eb34412f383d
SSDEEP

6144:OL39AgMEXXFsvLG+X7JrC0gp7a1Oqm3DkduLD6jgEpU:O6gMEXXayO7Jtgpf34uX+lpU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a22e414b5e709ba2d1358d370cf9e89_JaffaCakes118

Files

8a22e414b5e709ba2d1358d370cf9e89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcffb876ec9a76ebce3b177895268fd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

user32

GetKeyboardType
CreateWindowExA

advapi32

RegSetValueExW
RegQueryValueExA

oleaut32

CreateErrorInfo
SafeArrayPtrOfIndex
SysFreeString

version

VerQueryValueA

gdi32

TranslateCharsetInfo
UnrealizeObject

ole32

CreateStreamOnHGlobal
CoTaskMemFree

comctl32

ImageList_SetIconSize

imm32

ImmSetCompositionWindow

winspool.drv

OpenPrinterA
DEVICECAPABILITIES

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
ShellExecuteExA

wininet

InternetSetOptionA

comdlg32

PageSetupDlgA

oledlg

OleUIObjectPropertiesA

wsock32

WSACleanup

winmm

timeSetEvent

Exports

Exports

av_free
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcffb876ec9a76ebce3b177895268fd1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

imm32

winspool.drv

shell32

wininet

comdlg32

oledlg

wsock32

winmm

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 24KB