04370054c0f342bc2a03189e40ba36a1_JaffaCakes118

General

Target

04370054c0f342bc2a03189e40ba36a1_JaffaCakes118
Size

169KB
MD5

04370054c0f342bc2a03189e40ba36a1
SHA1

e1529b55901d51853274c906851180366ada35ee
SHA256

d90e98a376f33ecef22c9730554b1fd3f09cede24517fef2ab2aded2c24a6c3f
SHA512

54e769a765502dd56da5533debe13c9f3036f63c39c557fd4e202e8b1ffd65fdb39c7328e950331de5e97722cd1536d60f3a0fc85d9b3a78860c249327998f08
SSDEEP

3072:UZn72rGigZ0wWOaHLm5KptN6Ffmkz5lG0gPRC:UOGiMWF4u+5wrPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04370054c0f342bc2a03189e40ba36a1_JaffaCakes118

Files

04370054c0f342bc2a03189e40ba36a1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e9edc076ce6016ed861a7ae420ef0351

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\lchnWo\cAsdwdu\smItu.pdb

Imports

gdi32

ScaleViewportExtEx
FillRgn
GetObjectA
CreatePalette
GetWindowOrgEx
TranslateCharsetInfo
TextOutA
CreateRectRgn

ntdll

_aullrem

user32

GetShellWindow
SendMessageA
GetMessageTime
LoadStringA
GetMonitorInfoW
ArrangeIconicWindows
WindowFromDC
CharLowerW
SetWindowTextW
LookupIconIdFromDirectory
LoadIconA
GetClassInfoExW

kernel32

FindResourceExA
IsDBCSLeadByteEx
MoveFileW
lstrlenW
lstrcmpW
GetModuleHandleW
VirtualFree
GetProcAddress
RemoveDirectoryW
GetSystemDefaultLCID
FindResourceA
GetFileSize

Exports

Exports

?mezdqsdHttpz@@YGIPAGG@Z
?qhjOVGogvGiwy@@YGNPAG@Z
?GyzpoiIhUytaGbfdCifo@@YGPAIPAMI@Z
?hJIiTunhubiDnL@@YGPAXPAJK@Z
?bjwgvhrloIbEFssilzE@@YGPAKKG@Z
?hWgfuqTpfvbk@@YGXPAND@Z
?ytMQMUvQ@@YGMK@Z

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9edc076ce6016ed861a7ae420ef0351

Headers

File Characteristics

PDB Paths

Imports

gdi32

ntdll

user32

kernel32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.data Size: 141KB - Virtual size: 217KB

.crt Size: 3KB - Virtual size: 3KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 15KB - Virtual size: 15KB

.data
Size: 141KB - Virtual size: 217KB

.crt
Size: 3KB - Virtual size: 3KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 2KB