a0996bc6f339815f285e1ee0d9f9aa32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a0996bc6f339815f285e1ee0d9f9aa32_JaffaCakes118
Size

178KB
MD5

a0996bc6f339815f285e1ee0d9f9aa32
SHA1

157b264f92d5022518e88fde2aa8170d462b6fca
SHA256

152146e0483515ef13d226e78719fbda8e16b67ec5f34b95edbad3362a00091b
SHA512

7e4a0af585df0000f73abb464e035559cfd0259005136b8193044b0b5b815f4057b51284ee4d14caff381826fed8271120f96061b62daf9f08b36ec132eae630
SSDEEP

3072:TwP59hjdF0dxsU7LmY265tFGteVysenhUh5W8DfdJUm3U+r:TwPL1fwdc678JsWuhRfkw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0996bc6f339815f285e1ee0d9f9aa32_JaffaCakes118

Files

a0996bc6f339815f285e1ee0d9f9aa32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9aeb35e1180bdbad8a2076c4b20c0578

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

winmm

mciSendCommandA
sndPlaySoundA

user32

GetWindowLongA
SetWindowPos
GetDlgItem
ReleaseCapture
GetWindowInfo
FillRect
LoadCursorA
GetDC
ReleaseDC
IsWindow
SetWindowLongA
GetSysColor
MoveWindow
SetCursor
SetCapture

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

SetTapePosition
GetCurrentProcessId
ClearCommError
GetLocalTime
FindClose
GetVersion
EnumResourceNamesA
Sleep
FatalExit
GetWindowsDirectoryA
InterlockedExchange
FindFirstFileA

gdi32

SelectObject
RestoreDC
EnumFontFamiliesExA
GetStockObject
CreateSolidBrush
SaveDC
Rectangle
CreateRectRgn
GetDeviceCaps
CreateFontIndirectA
SetTextColor
BitBlt
SetBkMode
GetObjectA
CreateCompatibleDC
TextOutA
GetTextExtentPoint32A
DeleteObject
DeleteDC
DeleteMetaFile
CreateCompatibleBitmap

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

advapi32

RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegSetValueExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9aeb35e1180bdbad8a2076c4b20c0578

Headers

File Characteristics

Imports

shell32

winmm

user32

oleacc

kernel32

gdi32

ole32

advapi32

version

Sections

.text Size: 151KB - Virtual size: 150KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 23KB

.lib Size: 512B - Virtual size: 80KB

.text
Size: 151KB - Virtual size: 150KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 23KB

.lib
Size: 512B - Virtual size: 80KB