adcdecc66bc726f03d13fba49fef4a62_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

adcdecc66bc726f03d13fba49fef4a62_JaffaCakes118
Size

187KB
MD5

adcdecc66bc726f03d13fba49fef4a62
SHA1

f8d42a017a84d89593ad3961fefc50e6c76afb30
SHA256

2fb032fed569f252cac8641c6dca65c770ae11680839dfa9aa3d408e0aa3b89c
SHA512

42d379a05dbe5c9f998cf2a41c5bfb3e2c688ef5e32474691ccabeb5251f2d95e3f9b7f441d5f650f2fdb413ca209b66f1e36ea9118fd348bbaa456c03a19ea7
SSDEEP

3072:SZ8AZL/T1YtPqk1Njc4e+jvMyiZ81i8qjmfgak05DoA38OiD+pUZgLe0JR8zc7H1:SZ8KT1Ytik1vTJiScAZk05DoAudgLeaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adcdecc66bc726f03d13fba49fef4a62_JaffaCakes118

Files

adcdecc66bc726f03d13fba49fef4a62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e0240401cfb963a13284a0494b56d5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

winmm

mciSendCommandA
sndPlaySoundA

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

gdi32

CreateFontIndirectA
GetDeviceCaps
CreateRectRgn
EnumFontFamiliesExA
GetStockObject
BitBlt
GetObjectA
DeleteObject
TextOutA
GetTextExtentPoint32A
SetBkMode
DeleteDC
SetTextColor
SaveDC
CreateCompatibleDC
Rectangle
RestoreDC
CreateSolidBrush
SelectObject
DeleteMetaFile
CreateCompatibleBitmap

kernel32

SetTapeParameters
InterlockedExchange
ClearCommError
GetVersion
GetCurrentProcessId
Sleep
EnumResourceNamesA
FindClose
ExitProcess
GetWindowsDirectoryA
GetLocalTime
FindFirstFileA

user32

GetWindowLongA
SetCursor
ReleaseDC
GetSysColor
MoveWindow
SetWindowLongA
GetWindowInfo
SetWindowPos
IsWindow
LoadCursorA
ReleaseCapture
GetDlgItem
GetDC
FillRect
SetCapture

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e0240401cfb963a13284a0494b56d5a

Headers

File Characteristics

Imports

version

shell32

winmm

advapi32

gdi32

kernel32

user32

ole32

oleacc

Sections

.text Size: 163KB - Virtual size: 163KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 19KB

.lib Size: 512B - Virtual size: 224KB

.text
Size: 163KB - Virtual size: 163KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 19KB

.lib
Size: 512B - Virtual size: 224KB