94e94b635d5a9b997a51333ad4ae7f05_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94e94b635d5a9b997a51333ad4ae7f05_JaffaCakes118
Size

116KB
MD5

94e94b635d5a9b997a51333ad4ae7f05
SHA1

4d6655add20ba0384656c3d3b8f1c4c4888fe13b
SHA256

03dcda48c34e8ec5fa037d1a467b95d020aff9b68f255282bee8ed8b9cdc2098
SHA512

0088bb985910f47783961e7a6f41eece18295a1166aa9b469507bbe19b868f16b2262e0060709423bc1fe6499326f82bfa1a1741cd3df1a394ab9e5cf535bafa
SSDEEP

3072:rBNPutT9nI6o5FzzQOMoDeUxui/aH20o:r/utT925pfG8/y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94e94b635d5a9b997a51333ad4ae7f05_JaffaCakes118

Files

94e94b635d5a9b997a51333ad4ae7f05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b426e8951c218720ccc6422d7d6e302c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3dxof

DirectXFileCreate

dinput

DirectInputCreateA

winmm

timeGetTime

kernel32

lstrlenA
MultiByteToWideChar
GetProcAddress
lstrcmpiA
ExitProcess
GetCommandLineA
LCMapStringA
GetVersion
GetStringTypeA
SetEnvironmentVariableA
GetStringTypeW
CompareStringA
LoadLibraryA
CompareStringW
GetACP
GetCPInfo
GetOEMCP
SetStdHandle
IsBadCodePtr
FlushFileBuffers
SetUnhandledExceptionFilter
CreateFileA
IsBadReadPtr
VirtualAlloc
SetFilePointer
IsBadWritePtr
HeapReAlloc
WriteFile
HeapSize
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
lstrcpyA
GetModuleHandleA
WritePrivateProfileStringA
GetPrivateProfileIntA
ReadFile
SetEndOfFile
LCMapStringW
RtlUnwind
GetStartupInfoA
FreeEnvironmentStringsA
GetLastError
CloseHandle
RaiseException
HeapFree
HeapAlloc
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
GetModuleFileNameA

user32

DefWindowProcA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
MessageBoxA
GetMessageA
DestroyWindow
GetWindowRect
PeekMessageA
LoadAcceleratorsA
CreateWindowExA
UpdateWindow
ShowWindow
RegisterClassA
LoadCursorA
RedrawWindow
SendDlgItemMessageA
DrawMenuBar
ClientToScreen
SetRect
GetClientRect
SetWindowPos
DialogBoxIndirectParamA
LoadImageA
PostQuitMessage
EndDialog
SetCursor
TrackPopupMenuEx
LoadMenuA
GetSubMenu
DialogBoxParamA
SendMessageA
GetWindowLongA
LoadIconA

gdi32

BitBlt
DeleteDC
GetObjectA
GetStockObject
ExtTextOutA
SetBkMode
SetTextColor
CreateCompatibleDC
GetDIBColorTable
DeleteObject
CreatePen
SelectObject
MoveToEx
LineTo

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ddraw

DirectDrawCreate
DirectDrawEnumerateA

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b426e8951c218720ccc6422d7d6e302c

Headers

File Characteristics

Imports

d3dxof

dinput

winmm

kernel32

user32

gdi32

advapi32

ddraw

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 314KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 314KB

.rsrc
Size: 4KB - Virtual size: 2KB