0fda47938b4e46ba30ab214475b5b9e9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0fda47938b4e46ba30ab214475b5b9e9_JaffaCakes118
Size

120KB
MD5

0fda47938b4e46ba30ab214475b5b9e9
SHA1

f0d75349f3b86fdbeff05f0b40273992805e723d
SHA256

aaff883ac30d17b5b9b2046c536c75af060b3c2d3502e417a53fd94b3a8f0b73
SHA512

2d607c62bd3b673c514a8c2c92aca1a79f0fdb3a6ff665de71e75762295176e318f17256ee37e41a3cef15988f1bba9c237b57f79196f8c119dd60fd40d22100
SSDEEP

3072:ZZTqdBoq809rxC0l8emLGZdTZ1ZLMTGyq7baG7r:fT09rxC0l8emot1q0nr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fda47938b4e46ba30ab214475b5b9e9_JaffaCakes118

Files

0fda47938b4e46ba30ab214475b5b9e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e53010cf451899b0aaea306a7d9b3cd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalShrink
MulDiv
OpenJobObjectW
ReadFile
HeapFree
SetEnvironmentVariableA
TlsGetValue
TryEnterCriticalSection
WaitForMultipleObjectsEx
HeapCreate
HeapAlloc
GlobalAlloc
GetVersionExA
GetTimeZoneInformation
GetTempPathW
GetSystemInfo
GetStringTypeExW
GetModuleHandleA
GetLogicalDriveStringsW
GetFileAttributesExA
GetExitCodeProcess
GetConsoleOutputCP
GetCommandLineA
ExitProcess
EraseTape
EndUpdateResourceA
DuplicateHandle
DeleteCriticalSection
CloseHandle
RemoveDirectoryW
BeginUpdateResourceA

ole32

CoUninitialize
CoFreeUnusedLibraries
IsEqualGUID

winmm

midiOutCacheDrumPatches
mmioDescend
mxd32Message
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInReset
waveInStop
joyGetPos
waveOutUnprepareHeader
waveOutPrepareHeader

ws2_32

WSAGetLastError
WSAStringToAddressA
WSAUnhookBlockingHook
send
socket
connect
closesocket
WSAWaitForMultipleEvents
listen

dinput

DirectInputCreateW

user32

TranslateMessage
AdjustWindowRect
CharLowerBuffA
CharToOemA
CheckMenuItem
ClientToScreen
DefWindowProcA
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DrawFrame
EmptyClipboard
EnumDisplayMonitors
EnumWindowStationsA
GetForegroundWindow
GetTitleBarInfo
IsWindowEnabled
LoadIconA
MessageBeep
MessageBoxW
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
RegisterShellHookWindow
RegisterWindowMessageA
UpdateWindow
UpdateLayeredWindow

version

VerQueryValueA
GetFileVersionInfoA

shell32

ShellExecuteA
SHGetSpecialFolderPathW
SHFileOperationW

advapi32

SetSecurityDescriptorDacl
AddAccessDeniedAce
CryptEncrypt
EqualSid
FileEncryptionStatusW
GetAce
GetAclInformation
GetLengthSid
GetTrusteeNameW
InitializeSecurityDescriptor
LsaClearAuditLog
LsaSetSecret
OpenProcessToken
OpenServiceA
QueryServiceConfig2A
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
SystemFunction013

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e53010cf451899b0aaea306a7d9b3cd6

Headers

File Characteristics

Imports

kernel32

ole32

winmm

ws2_32

dinput

user32

version

shell32

advapi32

Sections

.text Size: 80KB - Virtual size: 79KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 80KB - Virtual size: 79KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB