JaffaCakes118_75ec0e2be0f597ecd76ceffa7831b947

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_75ec0e2be0f597ecd76ceffa7831b947
Size

178KB
MD5

75ec0e2be0f597ecd76ceffa7831b947
SHA1

0668e41f889ae6a5a489be80904fed3c6c32f4e2
SHA256

4dd2e7185ad0e32db166ea51b6747f216722c9aab7f255e54022495fafda7e62
SHA512

98f033f273eef380a6434ea33b3bb78101b896af9c77b755c9d2657bdb68a1509a7e0f684012569b78f6e31371a4f870bcae0c80c046aeee51bf931ff93ee4cb
SSDEEP

3072:qNFu5imARINfhtn/WYb8npiYgv8ZZ57S/c2dsCIyL9Tu+M6DdksXCri47k:qNFsea/WVp4vGE/c2T3MWLSrZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_75ec0e2be0f597ecd76ceffa7831b947

Files

JaffaCakes118_75ec0e2be0f597ecd76ceffa7831b947
.exe windows:4 windows x86 arch:x86

17d6a72d02461fa953d9549eaf2c8eb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetTapePosition
InterlockedExchange
ClearCommError
Sleep
GetLocalTime
GetCurrentProcessId
FindClose
EnumResourceNamesA
GetVersion
FatalExit
GetWindowsDirectoryA
FindFirstFileA

winmm

mciSendCommandA
sndPlaySoundA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

user32

MoveWindow
GetDC
SetWindowLongA
GetSysColor
GetWindowLongA
ReleaseDC
FillRect
GetWindowInfo
GetDlgItem
SetWindowPos
IsWindow
ReleaseCapture
SetCursor
LoadCursorA
SetCapture

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

RestoreDC
CreateSolidBrush
SaveDC
CreateRectRgn
BitBlt
SelectObject
DeleteDC
GetStockObject
CreateFontIndirectA
Rectangle
GetDeviceCaps
DeleteMetaFile
TextOutA
CreateCompatibleDC
SetBkMode
GetObjectA
EnumFontFamiliesExA
GetTextExtentPoint32A
SetTextColor
DeleteObject
CreateCompatibleBitmap

ole32

CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueExA

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17d6a72d02461fa953d9549eaf2c8eb2

Headers

File Characteristics

Imports

kernel32

winmm

version

user32

oleacc

gdi32

ole32

shell32

advapi32

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 26KB - Virtual size: 25KB

.lib Size: 512B - Virtual size: 80KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 26KB - Virtual size: 25KB

.lib
Size: 512B - Virtual size: 80KB