a5bebf1a55a731e26a53e415d41101d7_JaffaCakes118

General

Target

a5bebf1a55a731e26a53e415d41101d7_JaffaCakes118
Size

171KB
MD5

a5bebf1a55a731e26a53e415d41101d7
SHA1

ecb3ae37a944ad5d57674d14dd826ab6405c5fda
SHA256

d8a2ff568daa669786af3438a423925febeb671e962aa4568a36aac858f470fd
SHA512

717bf9088d5f76c570c3b36c7fbd66b8c01ef42f1643ad20f91950a3dd9b7cf3d7492a1a146a528ef47d86f6e2dcddb05efe79bce989379576c46b343f97111e
SSDEEP

3072:/aQ6burxhbiYgI/8HiWJQc+1kTMSfFo0weIFWoJ8NhGbiwX5BC:YoxlA8xcKGDwe9oJh+wX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5bebf1a55a731e26a53e415d41101d7_JaffaCakes118

Files

a5bebf1a55a731e26a53e415d41101d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba02aa40488df834cecb16b1d8b9f90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

winmm

mciSendCommandA
sndPlaySoundA

kernel32

GetACP
InterlockedExchange
GetCalendarInfoW
HeapFree
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
HeapDestroy
GetCurrentProcess
GetStartupInfoA
GetEnvironmentVariableA
GetCurrentThreadId
QueryPerformanceCounter
LoadLibraryW
lstrlenW
SystemTimeToFileTime
WideCharToMultiByte
CreateProcessA
GetLocaleInfoA
EnumResourceNamesA
RaiseException
Sleep
LocalAlloc
GetProcessHeap
HeapSize
lstrlenA
FindFirstFileW
CreateFileW
LoadLibraryExW
GetThreadLocale
GetStdHandle
UnhandledExceptionFilter
GetTickCount
CloseHandle
MultiByteToWideChar
HeapReAlloc
InterlockedCompareExchange
WriteFile
GetCurrentProcessId
GetSystemTime
TerminateProcess
GetModuleHandleA
SetUnhandledExceptionFilter
lstrcpynW

user32

FillRect
ReleaseCapture
SetWindowPos
LoadCursorA
GetWindowInfo
GetSysColor
SetWindowLongA
ReleaseDC
GetWindowLongA
MoveWindow
GetDlgItem
IsWindow
SetCursor
GetDC
SetCapture

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba02aa40488df834cecb16b1d8b9f90d

Headers

File Characteristics

Imports

version

oleacc

ole32

winmm

kernel32

user32

Sections

.text Size: 91KB - Virtual size: 91KB

.rdata Size: 2KB - Virtual size: 2KB

.bss Size: 75KB - Virtual size: 75KB

.rsrc Size: 1024B - Virtual size: 252KB

.text
Size: 91KB - Virtual size: 91KB

.rdata
Size: 2KB - Virtual size: 2KB

.bss
Size: 75KB - Virtual size: 75KB

.rsrc
Size: 1024B - Virtual size: 252KB