fe366d35e178267bad43e71c46b1f64b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fe366d35e178267bad43e71c46b1f64b_JaffaCakes118
Size

178KB
MD5

fe366d35e178267bad43e71c46b1f64b
SHA1

8d4ad69d94408f746301b120b76b3b4095380bde
SHA256

4c5c9347d0af0152914fa038be724cf50b86dc015575c7b3a13a79c6696a8d19
SHA512

56015e7d4913f7a1caadc22f44e5d6b97c39fd70c63ee065d2542555148806345d7a2251e672048368042fbba26b1584819baa35048371c0998420ece06bbe53
SSDEEP

3072:8T01tmbdu7CEuOhAbmifNuf5skMMVMZHh2B0yjqZoii9O5+fP7eegkNDaHlWhJ:G0/WuVrhARV4s+V+VZoii9ztNDwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe366d35e178267bad43e71c46b1f64b_JaffaCakes118

Files

fe366d35e178267bad43e71c46b1f64b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a4decc2e3a88720d183c2d49a12b3475

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\xiVvkUng\kykab\lTgjPc\SspIJ.pdb

Imports

comdlg32

GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
PageSetupDlgW

kernel32

SleepEx
GetTickCount
LocalFree
lstrcmpW
GetComputerNameA
GetComputerNameW
WaitForMultipleObjects
lstrlenA
GetFileAttributesW
ClearCommBreak
LocalAlloc
GetComputerNameExW

shlwapi

StrCmpNIA

user32

GetClassLongA
RemovePropA
IsDialogMessageW
IsCharAlphaNumericA
GetClassLongW
SendDlgItemMessageW
GetAsyncKeyState
DrawStateW
IsCharAlphaNumericW
FindWindowW
DragObject
EnableScrollBar
InvertRect

gdi32

SetTextAlign
GetDeviceCaps
CreatePen
RestoreDC
SetBkMode
GetTextMetricsW
CreateFontA
EnumFontFamiliesW
CreateHatchBrush
RoundRect

Exports

Exports

?jcnuzzq@@YGPAG_NPAF@Z
?mXDHwqlxgVToEsyuzwgk@@YGPADG@Z
?jsMZvdohGfFtRHtBxXQon@@YGXII@Z

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4decc2e3a88720d183c2d49a12b3475

Headers

File Characteristics

PDB Paths

Imports

comdlg32

kernel32

shlwapi

user32

gdi32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 16KB

.edata Size: 512B - Virtual size: 174B

.temp Size: 142KB - Virtual size: 142KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 85KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 16KB

.edata
Size: 512B - Virtual size: 174B

.temp
Size: 142KB - Virtual size: 142KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 85KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 2KB