c090dbcb377142e6acdbd6f8c92976c0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c090dbcb377142e6acdbd6f8c92976c0_JaffaCakes118
Size

178KB
MD5

c090dbcb377142e6acdbd6f8c92976c0
SHA1

302aa59eddbfc36ebe62f1b9c88ec4e2c25f7de8
SHA256

18216d2c4a9fc8ecd930cd96f8fb38b966b7986c14c1f6ddd85d8e5cc2d064b1
SHA512

2f58a35c8b632ddb3eb2c678a7a20e3519ec153ea654f6501cb806cedf0adb9efe3280001096747708a6ce3d42f1ee1d36927a51875fc0c7fced6244a51efa0d
SSDEEP

3072:qNFu5imARINfhtn/WYb8npiYgv8ZZ57S/c2dsCIyL9Tu+M6DdksXCri47k:qNFsea/WVp4vGE/c2T3MWLSrZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c090dbcb377142e6acdbd6f8c92976c0_JaffaCakes118

Files

c090dbcb377142e6acdbd6f8c92976c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17d6a72d02461fa953d9549eaf2c8eb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetTapePosition
InterlockedExchange
ClearCommError
Sleep
GetLocalTime
GetCurrentProcessId
FindClose
EnumResourceNamesA
GetVersion
FatalExit
GetWindowsDirectoryA
FindFirstFileA

winmm

mciSendCommandA
sndPlaySoundA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

user32

MoveWindow
GetDC
SetWindowLongA
GetSysColor
GetWindowLongA
ReleaseDC
FillRect
GetWindowInfo
GetDlgItem
SetWindowPos
IsWindow
ReleaseCapture
SetCursor
LoadCursorA
SetCapture

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

RestoreDC
CreateSolidBrush
SaveDC
CreateRectRgn
BitBlt
SelectObject
DeleteDC
GetStockObject
CreateFontIndirectA
Rectangle
GetDeviceCaps
DeleteMetaFile
TextOutA
CreateCompatibleDC
SetBkMode
GetObjectA
EnumFontFamiliesExA
GetTextExtentPoint32A
SetTextColor
DeleteObject
CreateCompatibleBitmap

ole32

CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueExA

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17d6a72d02461fa953d9549eaf2c8eb2

Headers

File Characteristics

Imports

kernel32

winmm

version

user32

oleacc

gdi32

ole32

shell32

advapi32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 26KB - Virtual size: 25KB

.lib Size: 512B - Virtual size: 80KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 26KB - Virtual size: 25KB

.lib
Size: 512B - Virtual size: 80KB