b2fd32a157dceef595c3321e95bd687e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b2fd32a157dceef595c3321e95bd687e_JaffaCakes118
Size

17KB
MD5

b2fd32a157dceef595c3321e95bd687e
SHA1

f39fc2d5c52dac7ef0bfc9ca67346540f9b03d16
SHA256

490314a96712c6ff83b0bf46b5d58e2f6b99648a7bb2b9cad5534a2a02b9ff39
SHA512

effcbb4eeaf9beef9abf716c45eb7c064fcc002ba7748588c766e0b4b5cb174c1137224e20b847fe414faa0ebdcb0196dcb702a1ee3b2bf89d90591a3f24e7e0
SSDEEP

384:sCv261gdQ0ElrhhZTz7NEOyHWbJMTS6Jk:7e61gS0ohZTnN3+Wtkq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2fd32a157dceef595c3321e95bd687e_JaffaCakes118

Files

b2fd32a157dceef595c3321e95bd687e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

295b33f890a02046d19b8ee32620b833

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

fmodex

?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?setMode@Sound@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNELINDEX@@PAVSound@2@_NPAPAVChannel@2@@Z
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?isPlaying@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getPaused@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getCurrentSound@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSound@2@@Z
?getLength@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getChannelsPlaying@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?close@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
FMOD_System_Create

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep

msvcr80

_except_handler4_common
_decode_pointer
_crt_debugger_hook
_invoke_watson
_controlfp_s
exit
printf
_getch
_kbhit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

295b33f890a02046d19b8ee32620b833

Headers

File Characteristics

Imports

fmodex

kernel32

msvcr80

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 512B - Virtual size: 432B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 512B - Virtual size: 432B