f01232144f0230ab733d47ffe5f9c596_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f01232144f0230ab733d47ffe5f9c596_JaffaCakes118
Size

52KB
MD5

f01232144f0230ab733d47ffe5f9c596
SHA1

002ce8fc14b56f2d9e0a492b01bf7d346c81fb18
SHA256

666d16556e42da4cf2de345225c021df2adadc379c03225bfd4bf8f768ddc688
SHA512

2146a52fc2efe72a118a1fa2010258308c04dcb5309b1ed4fb5c422bfac16b0c788686daa13570526cd2229f8a5a2d5872af660af08e67ed621dc1db8cb79b64
SSDEEP

768:ZJaDQ2ac6lpSdgx9sI2JbQcn0Vp+W/+NUrfUnbZzzhpcRPNHMKc3a1OUG5+:mD+PG6XCJbQa6YZqDYZzQ8KoH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f01232144f0230ab733d47ffe5f9c596_JaffaCakes118

Files

f01232144f0230ab733d47ffe5f9c596_JaffaCakes118
.exe windows:5 windows x86 arch:x86

47bc5a48ba1425975d3830366f3dd30a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\wevatxg\lHqjvnDL\UDfz.pdb

Imports

shlwapi

StrSpnA
PathMakePrettyA

gdi32

GetDIBits
GetBkMode
LineDDA
GetTextExtentPointW
GetFontData

msvcrt

exit

kernel32

GetStartupInfoA
GetCommProperties
GetCurrentProcessId
ClearCommError
OpenFileMappingA
ExitProcess
CompareFileTime
SetEvent

user32

GetMenuStringW
TrackPopupMenuEx
DragObject
SetCursor
DefFrameProcA
ClipCursor
CharUpperBuffW
GetSystemMenu
GetDlgCtrlID
MapDialogRect
SendDlgItemMessageW
ChildWindowFromPointEx

comctl32

ImageList_Draw
ImageList_GetIcon
PropertySheetW

Exports

Exports

?dDXAb_ah@@YGHGH@Z
?c_nzW_CYAlURM_OP___I@@YGENPAF@Z
?N_TxUbnXU@@YGXPA_NG@Z
?xnvrY_QMHJBIdW@@YGHPAN@Z
?hXTH____Pxq@@YGFFPAH@Z
?TBRVySIA_F__D@@YGH_N@Z
?OXVKJIXB__YOK@@YGPAJPAJ@Z
?NDb__pbc__nt@@YGX_N@Z
?APENyovlrs@@YGPAGPAGH@Z
?__UVJFtrxmH@@YGPADF@Z
?HESZELVVua@@YGXGN@Z
?_BJ_TXTLAt_kn@@YGPAJD@Z
?e_eycqFI_LCPu_v_tas@@YGE_NH@Z
?HVECNSF_URQ@@YGEF@Z
?mgysqclmi@@YGGIH@Z
?fs_orug__g___xazjptnv@@YGPAEPAGPAF@Z

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47bc5a48ba1425975d3830366f3dd30a

Headers

File Characteristics

PDB Paths

Imports

shlwapi

gdi32

msvcrt

kernel32

user32

comctl32

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 34KB

.data Size: 5KB - Virtual size: 124KB

.rdata Size: 10KB - Virtual size: 10KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 35KB - Virtual size: 34KB

.data
Size: 5KB - Virtual size: 124KB

.rdata
Size: 10KB - Virtual size: 10KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB