951217046e029ffee5a4d4b7cf367adb_JaffaCakes118

General

Target

951217046e029ffee5a4d4b7cf367adb_JaffaCakes118
Size

102KB
MD5

951217046e029ffee5a4d4b7cf367adb
SHA1

ea58853de55ea548d40e69cf9affb97a2c8b88b1
SHA256

cebddd2fcd027fcfdac6cd4905d27ba16903dc560519af66e06b202e5d6ffea6
SHA512

7d815f8b49cf7c972b0e57823b8a035ef9068550d0ed7f43e29e35833c258fc2b7be7b6f809c2e056f46722b30c42fe67eb39598029947eb607c7b7c5c00e1c8
SSDEEP

1536:U6FT8+VG2ELADvhZi9cVuFvvts/Qthfh6ON+sMTRR2QEAD7g55q59:h8vLAn7uFH+2SONFORjc4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
951217046e029ffee5a4d4b7cf367adb_JaffaCakes118

Files

951217046e029ffee5a4d4b7cf367adb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb6503b3fe643406515b2cc60338d8db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
Shell_NotifyIconA
ShellExecuteW
ShellExecuteExW
ShellExecuteExA
ShellExecuteA
SHBindToParent
SHGetMalloc
SHGetFileInfoA
SHFileOperationA
SHGetPathFromIDListA

user32

BeginPaint
CreateMDIWindowA
EnableWindow
EndPaint
LoadIconA
MessageBeep
MessageBoxA
ShowCursor
ShowOwnedPopups

kernel32

GetPrivateProfileStringA
GetLastError
GetFileSize
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
TlsGetValue
TlsAlloc
Sleep
SetUnhandledExceptionFilter
SetLastError
SetEndOfFile
RtlUnwind
LoadLibraryA
InitializeCriticalSection
GetVersion
GetTimeFormatA
GetSystemTime
CloseHandle
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
ExitProcess
FindResourceA
GetDateFormatA
GetStartupInfoA

olepro32

OleCreatePropertyFrame
OleCreateFontIndirect
OleIconToCursor
OleTranslateColor

dsound

DirectSoundCreate8
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DirectSoundCaptureEnumerateA

dinput

DirectInputCreateEx
DirectInputCreateA

Sections

.text
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb6503b3fe643406515b2cc60338d8db

Headers

File Characteristics

Imports

shell32

user32

kernel32

olepro32

dsound

dinput

Sections

.text Size: 52KB - Virtual size: 56KB

.rdata Size: 31KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 8KB

.text
Size: 52KB - Virtual size: 56KB

.rdata
Size: 31KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 8KB