9561b8ac6fffe033b4b4872823020609_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9561b8ac6fffe033b4b4872823020609_JaffaCakes118
Size

181KB
MD5

9561b8ac6fffe033b4b4872823020609
SHA1

c89a8129b05bc81cf91439d08fe7ecaa20fdf887
SHA256

1d42b858a42538641378d49327b0980c81b9a27cafa021f81eb9286c1c509081
SHA512

5f30127b6d6c5702d3e8f9fe2c1e0276af46a7c6c4d0f396f241e1db6ab6f0f3e4f3e1ed14e4b91dff1df75ab0cdc8a59c0c13159df1a207f2e3eb5550925d7a
SSDEEP

3072:FZXEQwxleVR2IxLkX5YQcYY334X+HwLzAqvTYOZs7DphKb5LfyF/TfJY1d:FZwxlknLkfYnM46TvZOpA9LfeG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9561b8ac6fffe033b4b4872823020609_JaffaCakes118

Files

9561b8ac6fffe033b4b4872823020609_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2206f1c6754c111d6f60dca91afaef94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetInformationJobObject
OpenEventA
SetFilePointer
OpenWaitableTimerA
OpenSemaphoreA
ProcessIdToSessionId
AllocConsole
GetWindowsDirectoryA
SetEndOfFile
ReadConsoleA
AddConsoleAliasA
WriteConsoleA
GetVersion
IsBadReadPtr
GetConsoleAliasesLengthW
GetDllDirectoryA
GetConsoleWindow
QueueUserWorkItem
SetHandleInformation
GetEnvironmentStringsA
IsValidLocale
GetModuleHandleA
SetFileApisToANSI
UnlockFileEx
TlsFree
ConnectNamedPipe
FindNextVolumeMountPointA
FileTimeToLocalFileTime
QueryDosDeviceA
TlsAlloc
ReleaseMutex
HeapLock
DisconnectNamedPipe
GetCurrentDirectoryA
GetComputerNameExA
GetConsoleTitleA
WriteConsoleInputA
_lclose
ProcessIdToSessionId
GetCommandLineA
WriteProcessMemory
VirtualAllocEx
GetThreadPriority

user32

TranslateAcceleratorA
LockWorkStation
SetSysColors
CliImmSetHotKey
GetWindow
GetWindowTextA
GetClipboardOwner
PrintWindow
GetWindow
GetUserObjectSecurity
GetDCEx
EnumDisplaySettingsExA
DialogBoxParamA
PeekMessageA
CallMsgFilterA
GetKeyboardLayoutNameA
CharToOemA
PostQuitMessage
CopyRect
CloseClipboard
CreateWindowStationW
MapVirtualKeyA
DeviceEventWorker
CallNextHookEx
CallMsgFilter
MonitorFromPoint
DispatchMessageA
GetSystemMetrics
ShowOwnedPopups
GetShellWindow
OpenClipboard
CreateMDIWindowA
SendIMEMessageExA
EnumPropsExW
InSendMessageEx
TileChildWindows
PaintDesktop

hid

HidD_SetNumInputBuffers
HidD_GetPhysicalDescriptor

dsound

DirectSoundCreate

Exports

Exports

Aofurquhdua
EndHsejdnnp
BeginExfomieseh
Jhtwxhrvl
Mccrallbim
CreateSxnunvhojex
CloseLuqxgyqxdgm
OpenNjsbfhqfrwb
AddFfnmluiqnf
Lqhrgon
IsMyhjtwef
GetEvjuvohrymw
WriteMwjmdtb
Rtooycply
Gixdyigkdug
OpenNyorpftobuc
ReadTudwlew
Snrpmtt
Kdwmtsbbhs
Emjtldqb
Oqmwynt
InitTcdoqwciwt
CloseGrwhwlhvlpe
SetThhgqtbmo
EndUdfjofatu
Hbbmpcx
Iaugmcesabn
Cpsnuojbkt
SetXkkbwfpo
SetCsynkayan
Ywxahhuo
IsKvovvwylf

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2206f1c6754c111d6f60dca91afaef94

Headers

File Characteristics

Imports

kernel32

user32

hid

dsound

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 112KB - Virtual size: 111KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 53KB - Virtual size: 53KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 112KB - Virtual size: 111KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 53KB - Virtual size: 53KB

.reloc
Size: 3KB - Virtual size: 2KB