bfe5d129bc0cf8a0e59ed99857c4c8f9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfe5d129bc0cf8a0e59ed99857c4c8f9_JaffaCakes118
Size

178KB
MD5

bfe5d129bc0cf8a0e59ed99857c4c8f9
SHA1

92009f88ee0931d9c08355c477791c8316674c16
SHA256

c99b3ce4ba0dc8df5c7f5a7cf42ab01c8deb67bad470a3ad85f93f2408fb027d
SHA512

085621950d4fdd1fe6410a430510828a61f0512515fdf0b5d4b4de3ccb87b88a6b85af5e951a84d1de5b57f98dea0d03434c6daf54fa2dbfa775ae5cdc72998d
SSDEEP

3072:qNFu5imARINfhtn/WYb8npiYgv8ZZ57S/c2dsCIyL9Tu+M6DdksXCri47k:qNFsea/WVp4vGE/c2T3MWLSrZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfe5d129bc0cf8a0e59ed99857c4c8f9_JaffaCakes118

Files

bfe5d129bc0cf8a0e59ed99857c4c8f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17d6a72d02461fa953d9549eaf2c8eb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetTapePosition
InterlockedExchange
ClearCommError
Sleep
GetLocalTime
GetCurrentProcessId
FindClose
EnumResourceNamesA
GetVersion
FatalExit
GetWindowsDirectoryA
FindFirstFileA

winmm

mciSendCommandA
sndPlaySoundA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

user32

MoveWindow
GetDC
SetWindowLongA
GetSysColor
GetWindowLongA
ReleaseDC
FillRect
GetWindowInfo
GetDlgItem
SetWindowPos
IsWindow
ReleaseCapture
SetCursor
LoadCursorA
SetCapture

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

RestoreDC
CreateSolidBrush
SaveDC
CreateRectRgn
BitBlt
SelectObject
DeleteDC
GetStockObject
CreateFontIndirectA
Rectangle
GetDeviceCaps
DeleteMetaFile
TextOutA
CreateCompatibleDC
SetBkMode
GetObjectA
EnumFontFamiliesExA
GetTextExtentPoint32A
SetTextColor
DeleteObject
CreateCompatibleBitmap

ole32

CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueExA

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17d6a72d02461fa953d9549eaf2c8eb2

Headers

File Characteristics

Imports

kernel32

winmm

version

user32

oleacc

gdi32

ole32

shell32

advapi32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 26KB - Virtual size: 25KB

.lib Size: 512B - Virtual size: 80KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 26KB - Virtual size: 25KB

.lib
Size: 512B - Virtual size: 80KB