8d567af58aa54054cdf3bbd7e1396e62_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8d567af58aa54054cdf3bbd7e1396e62_JaffaCakes118
Size

199KB
MD5

8d567af58aa54054cdf3bbd7e1396e62
SHA1

ff686b75ef93036ba04adbeefc9ba3c3596c7572
SHA256

91bf0abd0f882eee4a0b41683b02dcdecbb2b94dc6294915281d5e39bbb5e90f
SHA512

1ac1645ed95d4400be53cd78277909adbd2d0da579e2941b4b1383aa0ea6af714ea4eb7e4a74109f1065b4e8343cf382d5871497fa0460ea84e41597a94c4f3b
SSDEEP

6144:SBd6Qler5cPh7y39r4RG1ifLgeJrukaQb8H:m8QlpKriG1ifLg+Fg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d567af58aa54054cdf3bbd7e1396e62_JaffaCakes118

Files

8d567af58aa54054cdf3bbd7e1396e62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e00bb417013ffb631ddc67715d6c6443

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

SetTapeParameters
InterlockedExchange
ClearCommError
FindClose
GetWindowsDirectoryA
GetLocalTime
EnumResourceNamesA
GetVersion
ExitProcess
Sleep
GetCurrentProcessId
FindFirstFileA

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

winmm

mciSendCommandA
sndPlaySoundA

user32

FillRect
ReleaseCapture
ReleaseDC
MoveWindow
GetDlgItem
SetCursor
LoadCursorA
SetWindowPos
GetWindowInfo
IsWindow
GetDC
GetWindowLongA
SetWindowLongA
GetSysColor
SetCapture

oleacc

LresultFromObject
CreateStdAccessibleObject

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegEnumKeyExA
RegSetValueExA

gdi32

TextOutA
GetTextExtentPoint32A
DeleteDC
GetObjectA
CreateCompatibleDC
GetStockObject
SaveDC
DeleteObject
BitBlt
SelectObject
CreateFontIndirectA
SetTextColor
CreateSolidBrush
CreateRectRgn
RestoreDC
Rectangle
SetBkMode
GetDeviceCaps
EnumFontFamiliesExA
DeleteMetaFile
CreateCompatibleBitmap

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e00bb417013ffb631ddc67715d6c6443

Headers

File Characteristics

Imports

version

kernel32

ole32

winmm

user32

oleacc

advapi32

gdi32

shell32

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 28KB - Virtual size: 27KB

.lib Size: 512B - Virtual size: 104KB

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 28KB - Virtual size: 27KB

.lib
Size: 512B - Virtual size: 104KB