feb224dc3ff6d49d11d2a5269d776ce5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

feb224dc3ff6d49d11d2a5269d776ce5_JaffaCakes118
Size

336KB
MD5

feb224dc3ff6d49d11d2a5269d776ce5
SHA1

e3c71ee2f060f0b005cee9056571ff1709cb97cc
SHA256

538a5f303b07910f4804cd73360686be0882a70730929933e5db74aa8cb86df4
SHA512

1acfce254c412751f41bef247e0585b9a4a2acc5e3df5ca76dbea511b82937cace41822ba5d4e6a5a3c4e4f96b831ab1170baf63f07b0ca34d72dcf4d0245774
SSDEEP

6144:TtmnzaIFnBlrnaMcxjxlWsen9chx/nXhqSV725ggeIqFuCTI2IOGdpDpB4S:TtmnzxnBlraxNl/4Ythq/eIqFuCTI2IT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb224dc3ff6d49d11d2a5269d776ce5_JaffaCakes118

Files

feb224dc3ff6d49d11d2a5269d776ce5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47457efadcd7467d7ac4e9f427fee335

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

wsock32

WSACleanup

shell32

ShellExecuteExA

ole32

CoTaskMemFree

urlmon

URLDownloadToFileA

comctl32

_TrackMouseEvent

wininet

InternetOpenUrlA

winmm

waveInUnprepareHeader

netapi32

Netbios

ntdll

NtUnmapViewOfSection
NtQuerySystemInformation

gdiplus

GdipGetImageEncoders

shfolder

SHGetFolderPathA

ws2_32

WSAIoctl

msacm32

acmStreamUnprepareHeader

pstorec

PStoreCreateInstance

rasapi32

RasGetEntryDialParamsA

url

InetIsOffline

avicap32

capGetDriverDescriptionA

Sections

.text
Size: 240KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

47457efadcd7467d7ac4e9f427fee335

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

user32

gdi32

version

wsock32

shell32

ole32

urlmon

comctl32

wininet

winmm

netapi32

ntdll

gdiplus

shfolder

ws2_32

msacm32

pstorec

rasapi32

url

avicap32

Sections

.text Size: 240KB - Virtual size: 832KB

.rsrc Size: 94KB - Virtual size: 96KB

.text
Size: 240KB - Virtual size: 832KB

.rsrc
Size: 94KB - Virtual size: 96KB