414df3e0819b9b1c207637356f3ab72d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

414df3e0819b9b1c207637356f3ab72d_JaffaCakes118
Size

105KB
MD5

414df3e0819b9b1c207637356f3ab72d
SHA1

03a924f13651d1162719a4a8645b40e9c7ae9fce
SHA256

ca1ad98ae6aa45f9d13e8e0174a4bc53833a9855291bf9626572e300bfefb787
SHA512

bafd7e23bd046230b9b4fe9f7b1e14b6779b84045d4826f67b2a0dff2036fd77fade3a34eca6391ccc6653c5dd516439e38a5835aba0297e9884de98810e63d2
SSDEEP

3072:fUaktPyvwhs7gwu3vuOfQ8+OgBgMVKmRuqBPpbQ:fvkCwmMwu3vjQ5Hg0K/qBPpb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
414df3e0819b9b1c207637356f3ab72d_JaffaCakes118

Files

414df3e0819b9b1c207637356f3ab72d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4baa7178daa62733816a24520990295

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate
DirectDrawEnumerateA
DirectDrawCreateEx

kernel32

LCMapStringA
RtlUnwind
GetSystemInfo
GetVersionExA
CreateConsoleScreenBuffer
FreeEnvironmentStringsA
IsBadWritePtr
CreateToolhelp32Snapshot
HeapReAlloc
GetProcessVersion
GetStartupInfoA
HeapDestroy
GetModuleFileNameA
FreeEnvironmentStringsW
HeapAlloc
UnhandledExceptionFilter
WriteFile
ExitProcess
VirtualProtect
VirtualAlloc
HeapFree
HeapSize
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStdHandle
GetCommandLineA
HeapCreate
VirtualQuery
VirtualFree
GetEnvironmentStrings
GetModuleHandleA
GetCurrentProcess

shlwapi

PathAddBackslashW
PathCombineW
PathFindExtensionW
PathRemoveFileSpecW
PathAppendW

shell32

ShellExecuteExW

user32

IsDlgButtonChecked
LoadStringW
SetWindowPos
DispatchMessageW
PostMessageW
GetMessageW
RegisterWindowMessageA
DefWindowProcW
PostQuitMessage
RegisterClassExW
FindWindowW
GetWindowRect
DialogBoxParamW
GetSystemMetrics
wsprintfW
EndDialog
CreateWindowExW
TranslateMessage
DestroyWindow

ole32

CoUninitialize
CoInitialize
CoCreateInstance
GetRunningObjectTable
CreateClassMoniker

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegEnumValueA
RegEnumValueW
RegCreateKeyExW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4baa7178daa62733816a24520990295

Headers

File Characteristics

Imports

ddraw

kernel32

shlwapi

shell32

user32

ole32

advapi32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 33KB - Virtual size: 32KB

.rsrc Size: 1024B - Virtual size: 84KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 1024B - Virtual size: 84KB