e96b70d5cdb2d2e899bb9c15a3675132_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e96b70d5cdb2d2e899bb9c15a3675132_JaffaCakes118
Size

134KB
MD5

e96b70d5cdb2d2e899bb9c15a3675132
SHA1

615966967cb83f4734c93fe05fc598651d71327e
SHA256

e24466232d453699156baf8ddcb4f3837e51358fb7d1552d494bff1c6c30118a
SHA512

792dfd5c15e940f6715fdf1074b900c174933b22ab70660bf656b15e0be043268d1bec3c6563eb85d17be8cc0d34660b11112abc7fd2c38c69c6c3785ff68e23
SSDEEP

3072:LCegZhvDrM7EurthjWbbsGj+zQ7Pgyu3EfHsZ3TVy1BvsU3:BQhvDPGXjWfsC+z6aWstT+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e96b70d5cdb2d2e899bb9c15a3675132_JaffaCakes118

Files

e96b70d5cdb2d2e899bb9c15a3675132_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bdf72475194c1ccf8e037f10bc47b31d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Mank\jmnBStS\SdUmsTv\wUis.pdb

Imports

gdi32

ExtFloodFill
GetNearestColor
GetFontData
SelectClipRgn
SetBkColor
GetTextMetricsW
GetRgnBox
SetViewportExtEx

comctl32

CreateStatusWindowW
ImageList_Write
ImageList_Read
ImageList_GetImageCount

kernel32

lstrcmpiA
GetAtomNameW
FreeLibrary
SetCommMask
GlobalReAlloc
CreateThread
GetProcAddress
GlobalMemoryStatus
OpenEventW
GetCompressedFileSizeW
GetModuleHandleA
LoadLibraryA
GetTickCount

user32

SetWindowTextW
wsprintfW
AppendMenuW
EnableMenuItem
SetWindowTextA
GetClassNameW
GetMenuItemCount
SetDlgItemTextA
GetClientRect
SetMenuItemBitmaps
LoadStringW
GetSystemMenu
FrameRect

Exports

Exports

?NvwkiYvPijvzcemmx@@YGPAHPAME@Z
?SztFsiayxjOgTbsczyQ@@YGXPAEPAF@Z
?qvkxacmefoETCyt@@YGPAHJJ@Z
?BfdIncZ@@YGDH@Z

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdf72475194c1ccf8e037f10bc47b31d

Headers

File Characteristics

PDB Paths

Imports

gdi32

comctl32

kernel32

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.idata Size: 1024B - Virtual size: 1004B

.data Size: 5KB - Virtual size: 265KB

.pdata Size: 9KB - Virtual size: 9KB

.xdata Size: 89KB - Virtual size: 89KB

.edata Size: 1024B - Virtual size: 720B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 20KB

.idata
Size: 1024B - Virtual size: 1004B

.data
Size: 5KB - Virtual size: 265KB

.pdata
Size: 9KB - Virtual size: 9KB

.xdata
Size: 89KB - Virtual size: 89KB

.edata
Size: 1024B - Virtual size: 720B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 2KB