30645f708cd15201e938106a628a81b5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

30645f708cd15201e938106a628a81b5_JaffaCakes118
Size

91KB
MD5

30645f708cd15201e938106a628a81b5
SHA1

62ba4f400b07fc192f4a79f94bb40be3a3d2db2a
SHA256

e1b13d287bdc3bb45530e61a26f1f0f36b0709ac42eff61d5f84d762a342775a
SHA512

468e9744026c89353f590fd016d74ac4013bb8f871a335bc94a162f868b33d4984c52ec3da6b7b9e39695a0435b681a1ffa6a285f5f401d3154472c3cab10678
SSDEEP

1536:44541gyKhK8C0w9KfYsNdArE+Q2GBs2maCfLR4thWYl5nmjmt/QvBKgEvprbtlEu:4MAgyKQ/0oKfJvArhlLLDGthpMjmt/QC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30645f708cd15201e938106a628a81b5_JaffaCakes118

Files

30645f708cd15201e938106a628a81b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ce63611036e48a03cde5ab54cec49d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFreeEx
LoadLibraryA
VirtualProtect
OpenMutexW
OpenProfileUserMapping
GetModuleHandleA
ExitThread
VirtualAlloc
TlsGetValue
GetVersionExA
WriteFile
DeleteFiber
VirtualFree
GetStartupInfoW
CopyFileA

msvcrt

isleadbyte
_stat
_execle
ldiv
memchr
ceil
memcpy
_ultow
_putch
wcscmp
_mbcjmstojis
isalpha
__argv

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
ReplaceTextA
PrintDlgExW
dwLBSubclass
FindTextW
PrintDlgExA
CommDlgExtendedError
ReplaceTextW
ReplaceTextA
ChooseColorA
GetOpenFileNameW
LoadAlterBitmap
ChooseFontW
ChooseFontA
FindTextA
GetSaveFileNameW
WantArrows

winmm

mixerGetControlDetailsW
OpenDriver
waveOutSetPitch
joyGetPos
NotifyCallbackData
mmioAdvance
sndPlaySoundW
midiInPrepareHeader
waveOutGetID
WOWAppExit
mciExecute
waveOutOpen
WOW32DriverCallback
joyGetNumDevs
mciGetDeviceIDFromElementIDA
DrvGetModuleHandle
mciGetDeviceIDW

opengl32

glColor3i
glVertex3sv
glTexGeni
glEvalPoint1
glLightModelf
GlmfPlayGlsRecord
glTexCoord2dv
glColor3uiv
glClipPlane
glInitNames
glPushClientAttrib

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ce63611036e48a03cde5ab54cec49d7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

opengl32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 21KB - Virtual size: 20KB

.rsrc Size: 22KB - Virtual size: 22KB

.reloc Size: 512B - Virtual size: 54B

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 22KB - Virtual size: 22KB

.reloc
Size: 512B - Virtual size: 54B