05743673d7648ef732043c2960c53adc_JaffaCakes118

General

Target

05743673d7648ef732043c2960c53adc_JaffaCakes118
Size

104KB
MD5

05743673d7648ef732043c2960c53adc
SHA1

b882a0852e58b806722aa9dd90e8623432c26127
SHA256

fae27e6cba28b7d109e3e082692b97554dbeec79a2297357b0825f0c9db0dd79
SHA512

257aec1435d83e55a0527e45dbbe2c4658610dd1bc1d288d9d239132a7312100ccd7e702629c4ea6ca95e312b68c837cc9663d84df8eda99d107917844e4a0c8
SSDEEP

3072:SHjrHaC+qCOipy3oYOXIUE1Kv6fSS59/l:SHatHYUqcZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05743673d7648ef732043c2960c53adc_JaffaCakes118

Files

05743673d7648ef732043c2960c53adc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5ae766faea5324a0d6aa5abd69295807

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\dHvkjxai\hlmej\emcc.pdb

Imports

comdlg32

GetOpenFileNameW
ChooseFontW
ChooseColorW

user32

SetFocus
GetCaretBlinkTime
GetDlgItemInt
AllowSetForegroundWindow
IsCharAlphaA
wsprintfA
FindWindowA
PeekMessageA
SetWindowLongA
GetClassInfoA
LoadCursorW
GetIconInfo

comctl32

ImageList_LoadImageW
ImageList_Destroy
ImageList_Write

gdi32

GetBitmapBits
CreateBrushIndirect
GetNearestColor
CreateRectRgn
PatBlt
CreateSolidBrush
GetDIBColorTable
ExtTextOutA
GetTextExtentPointA

kernel32

DeleteFileA
CloseHandle
GetVersion
lstrlenA
TlsSetValue
GetShortPathNameW
SetConsoleScreenBufferSize
GetSystemTimeAdjustment
TransactNamedPipe
lstrcpyA
GetConsoleOutputCP
GetTickCount
GlobalReAlloc
CreateWaitableTimerA
EnumResourceNamesA

Exports

Exports

?tvwDhtpqqhkahgr@@YGPAXPAI@Z
?gTaLpoblbjbAhf@@YGJE@Z
?JUdnoAhhdZe@@YGPAKPAHPAF@Z
?bxpeVkmJDuvnKmdjyijoxg@@YGXK@Z
?fQvsmrP@@YGXPAF@Z
?mCFjquulIieV@@YGIK@Z
?qKmjEJhCwcGrdrDCy@@YGPAKPAK@Z

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ae766faea5324a0d6aa5abd69295807

Headers

File Characteristics

PDB Paths

Imports

comdlg32

user32

comctl32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 5KB - Virtual size: 69KB

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 5KB - Virtual size: 69KB

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 2KB - Virtual size: 1KB