3e7743b43ef935e4afee69130565f83f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e7743b43ef935e4afee69130565f83f_JaffaCakes118
Size

201KB
MD5

3e7743b43ef935e4afee69130565f83f
SHA1

9863be9c9991e36daabf1959432ccd11f288fdac
SHA256

9aa05191f56b229a5cb83748ec4ed46063fb2cace610d7a3606ba6654724abd6
SHA512

2fea24563afc3c9b438177e10874ed7ccd22a72a0b8d8809c0d9bdfabf9c5f1910deb334a3e036514e5d35139e1f1a09e27c3ca80adbbf7ee34ce7397c65eba8
SSDEEP

3072:xZqsbck8lY+SpQsY6TNHrU4t3d4o1raaJH6ACxfek25pkObI4V6pOyMJRug/e2u0:xZekYSWsYwHr13db1OacO5S4kKug3Gu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e7743b43ef935e4afee69130565f83f_JaffaCakes118

Files

3e7743b43ef935e4afee69130565f83f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e0240401cfb963a13284a0494b56d5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

winmm

mciSendCommandA
sndPlaySoundA

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

gdi32

CreateFontIndirectA
GetDeviceCaps
CreateRectRgn
EnumFontFamiliesExA
GetStockObject
BitBlt
GetObjectA
DeleteObject
TextOutA
GetTextExtentPoint32A
SetBkMode
DeleteDC
SetTextColor
SaveDC
CreateCompatibleDC
Rectangle
RestoreDC
CreateSolidBrush
SelectObject
DeleteMetaFile
CreateCompatibleBitmap

kernel32

SetTapeParameters
InterlockedExchange
ClearCommError
GetVersion
GetCurrentProcessId
Sleep
EnumResourceNamesA
FindClose
ExitProcess
GetWindowsDirectoryA
GetLocalTime
FindFirstFileA

user32

GetWindowLongA
SetCursor
ReleaseDC
GetSysColor
MoveWindow
SetWindowLongA
GetWindowInfo
SetWindowPos
IsWindow
LoadCursorA
ReleaseCapture
GetDlgItem
GetDC
FillRect
SetCapture

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e0240401cfb963a13284a0494b56d5a

Headers

File Characteristics

Imports

version

shell32

winmm

advapi32

gdi32

kernel32

user32

ole32

oleacc

Sections

.text Size: 175KB - Virtual size: 175KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 22KB - Virtual size: 21KB

.lib Size: 512B - Virtual size: 100KB

.text
Size: 175KB - Virtual size: 175KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 22KB - Virtual size: 21KB

.lib
Size: 512B - Virtual size: 100KB