f02a0dd34dedbacc38ac5860df380719_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f02a0dd34dedbacc38ac5860df380719_JaffaCakes118
Size

181KB
MD5

f02a0dd34dedbacc38ac5860df380719
SHA1

c2bd196d05b2874121167889d7dfe69b624d28fb
SHA256

f986d33341f4ac18a7f4b999c3bd1cec69d0fd0d400ecba0240d33ffe8edde42
SHA512

45ebd5e572588eb33a4e679a21a610feac370986e9988ff3de97f8329eb0a5c55184327c24693587f882b916c6cb7c0e2a9c9c20e8d8732d704226ba638e2c86
SSDEEP

3072:jmgf0h4WN4zEG2oOX60qTlFzHhYJbaykAM1JO/b7r4oyFq/y3nspSJ:yFCA+gXvqLbAk1ob7r4FFq48q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f02a0dd34dedbacc38ac5860df380719_JaffaCakes118

Files

f02a0dd34dedbacc38ac5860df380719_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0f37f43c5a5ff3f996745fa581662aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
LZClose
GetCurrentDirectoryA
GetNumberFormatA
GetCurrentProcess
PeekConsoleInputA
Module32Next
GetModuleHandleA
FindNextChangeNotification
GetSystemTimes
VerifyVersionInfoA
GetConsoleCursorInfo
FlushInstructionCache
PeekNamedPipe
SetEnvironmentVariableA
GetDevicePowerState
WinExec
GetLogicalDrives
DeleteTimerQueueEx
VirtualAllocEx
GetCommandLineA
LocalAlloc
GetCurrentProcessId
GetCurrentDirectoryA
ExitProcess
ReleaseSemaphore
HeapLock
TlsAlloc
GetSystemTime
GetCurrencyFormatA
HeapSize
IsWow64Process
WriteConsoleOutputCharacterW
GetTempPathA
TlsFree
GetModuleFileNameA
SetThreadIdealProcessor

user32

GetClassInfoExW
PostMessageA
PaintDesktop
EnableWindow
SetCursorContents
GetRawInputDeviceInfoA
GetAppCompatFlags
CreatePopupMenu
SetWindowsHookExW
DlgDirSelectExA
OpenWindowStationA
LoadImageA
EnumWindowStationsA
OemToCharA
OemToCharBuffA
BroadcastSystemMessageExW
EqualRect
EndPaint
ToUnicodeEx
CallMsgFilter
GetProcessDefaultLayout
SetSystemCursor
TranslateAccelerator
IsZoomed
CharNextExA
GetCapture
GetWindowRgnBox
GetKeyNameTextA
GetMonitorInfoA
GetDlgCtrlID
GetWindow
ActivateKeyboardLayout
DefRawInputProc
SetWinEventHook
SetForegroundWindow
GetSysColorBrush
EnableMenuItem
MessageBoxExA
GetWindowTextLengthW
IsIconic

hid

HidD_FlushQueue
HidD_SetNumInputBuffers

dsound

DirectSoundCreate

Exports

Exports

Xxtuudtap
Ytuvhqb
Xrrrnneb
Srdsnsfmkj
Xklinnp
Elkjvdfpjwl
Vheyoium
Iroirpwjqu
SetCakkrpwjjme
Hobboxd
ReadVkuytftkxcs
Bgomijj
GetTxedkpx
SetDoxrfvrxmsp
Hriwrkl
Bgncxgejxur
Lkxoxqxql
Upamdhtnqmr
Uldswwprqw
Vgbpbdfnnh
Vrvttlrgn
SetOwrrchqxcv
ReadVbvkiufgx
CloseWuujckpjxf
CloseMbretabla
CloseKpfgvmu
Rowpwnpr
Mcgjbijgvj
EndHjtrydey
Qkeyggx
CloseTidxooegtw
Blyokbmyoy

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0f37f43c5a5ff3f996745fa581662aa

Headers

File Characteristics

Imports

kernel32

user32

hid

dsound

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 2KB

.data Size: 112KB - Virtual size: 112KB

.rsrc Size: 53KB - Virtual size: 53KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 2KB

.data
Size: 112KB - Virtual size: 112KB

.rsrc
Size: 53KB - Virtual size: 53KB

.reloc
Size: 3KB - Virtual size: 2KB