d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118
Size

332KB
MD5

d9cf57a7c2e8430bd4224d594d6af42d
SHA1

49e4045518eaf43993e20417c957f6a46e9e7b02
SHA256

ba251654fa02a35fd14bdf741e3e9bb6e16b19ef66a4ad9c8220a18598b05fcb
SHA512

7f49c0fcc2de5aa845866b9ccc79d192276c0de2e35e703fd3b248ffb543571cfd58d3fa7912e638da8d346fa10a3752e41a1eacf1e9fcddf3e38fdf7c7a3695
SSDEEP

6144:/Y5Ix+fkSpcmwSUjT9jCu9UOem7HQKoZufpU:/YP7pdwSK9Z9/xEZopU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118

Files

d9cf57a7c2e8430bd4224d594d6af42d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcffb876ec9a76ebce3b177895268fd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

user32

GetKeyboardType
CreateWindowExA

advapi32

RegSetValueExW
RegQueryValueExA

oleaut32

CreateErrorInfo
SafeArrayPtrOfIndex
SysFreeString

version

VerQueryValueA

gdi32

TranslateCharsetInfo
UnrealizeObject

ole32

CreateStreamOnHGlobal
CoTaskMemFree

comctl32

ImageList_SetIconSize

imm32

ImmSetCompositionWindow

winspool.drv

OpenPrinterA
DEVICECAPABILITIES

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
ShellExecuteExA

wininet

InternetSetOptionA

comdlg32

PageSetupDlgA

oledlg

OleUIObjectPropertiesA

wsock32

WSACleanup

winmm

timeSetEvent

Exports

Exports

av_free
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcffb876ec9a76ebce3b177895268fd1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

imm32

winspool.drv

shell32

wininet

comdlg32

oledlg

wsock32

winmm

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 24KB