d31efe98088e4424f0e8d3224c1de550_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d31efe98088e4424f0e8d3224c1de550_JaffaCakes118
Size

172KB
MD5

d31efe98088e4424f0e8d3224c1de550
SHA1

15f6c57111e7dbe9c9eea8b611a1f4096d47f3a5
SHA256

cdf7f2b9960072ecfbd8d656938fb40b7c13ecc4ac66ca784413dd95e885655c
SHA512

4860fe625d60a37feffb4fbd3192cac9cae66678d6427b0206d7e486715e8521b9399a4c0af1840a0ccef576d4fbe6d8c5f2e0efe0232e7370323cf456ebf542
SSDEEP

3072:ShazYS4GPzJov518ZFEf5I8KEORGMROymwlVehHHpnASlzlXCSLLflL/ahdFcv:GaUS9rJ05GFEfK8KbzwylyRlcSLRL/ai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d31efe98088e4424f0e8d3224c1de550_JaffaCakes118

Files

d31efe98088e4424f0e8d3224c1de550_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19f5d40587e00e54c51450dbf37d90aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StringFromGUID2
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
OleInitialize
OleUninitialize
CoInitialize

avifil32

AVISaveOptions
AVIMakeCompressedStream

advapi32

RegSetValueExW
RegSetValueW
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW

user32

GetSysColorBrush
GetDesktopWindow
UnionRect
PtInRect
IsWindowVisible
FindWindowExW
UpdateWindow
EqualRect
LoadCursorW
BringWindowToTop
SetRect
SetCursor
SetWindowLongW
ShowScrollBar
CopyRect
DrawTextW
IsRectEmpty
GetWindowRect
EnableWindow
CreatePopupMenu
GetSystemMetrics
ReleaseDC
ScreenToClient
GetClientRect
ClientToScreen
SetForegroundWindow
GetSysColor
DefWindowProcW
OffsetRect
GetCursorPos
PostMessageW
IsWindow
SetTimer
wsprintfW
TrackPopupMenuEx
SetFocus
InflateRect
FrameRect
DestroyMenu
FillRect
KillTimer
GetActiveWindow
GetDC
SetCapture
DrawFocusRect
SetRectEmpty
SendMessageW
ReleaseCapture
GetParent
IntersectRect
GetWindowLongW
LoadImageW
InvalidateRect

kernel32

GetModuleFileNameA
FreeLibrary
WideCharToMultiByte
CloseHandle
FindClose
ReplaceFileW
FindFirstChangeNotificationW
GlobalLock
WaitForSingleObject
GetFullPathNameW
QueryPerformanceCounter
MultiByteToWideChar
FileTimeToLocalFileTime
EnterCriticalSection
GetCurrentProcessId
GetTickCount
GlobalUnlock
GetProcessId
CreateThread
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
GetACP
SetEvent
Sleep
FindFirstFileW
lstrlenA
GlobalAlloc
FileTimeToSystemTime
LeaveCriticalSection
InterlockedIncrement
EnumResourceTypesA
GetThreadLocale
GetDriveTypeW
FindNextChangeNotification
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
GetLocaleInfoA
FindCloseChangeNotification
lstrcpynW
InterlockedExchange
InterlockedDecrement
MulDiv
ResetEvent
GetLastError
GetCurrentThreadId
GetProcAddress
lstrlenW
DisableThreadLibraryCalls
GetVersionExW
GlobalReAlloc
GetVersionExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
DragQueryFileW
SHGetFileInfoW

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19f5d40587e00e54c51450dbf37d90aa

Headers

File Characteristics

Imports

ole32

avifil32

advapi32

user32

kernel32

shell32

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: 66KB - Virtual size: 66KB

.tls Size: 1024B - Virtual size: 256KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: 66KB - Virtual size: 66KB

.tls
Size: 1024B - Virtual size: 256KB