0b934c985112dc1858d59dffcbf73c57_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b934c985112dc1858d59dffcbf73c57_JaffaCakes118
Size

111KB
MD5

0b934c985112dc1858d59dffcbf73c57
SHA1

2ca27522f1d86c688f82f816eb77af4ec3e4de46
SHA256

cfe9415937504430ecff5c258ba4b1fa42df948bdf88880ca779088c188debef
SHA512

e0fefa15350ab15e3373f420cfad1625584be902b567eb25d968a2d3a4154b3b5d14d290f5615b24439a3ee4734e6cbb2b5abdbd82019568752d1430d59668be
SSDEEP

3072:8W3NDcI5sh95Xc+F+TLW40+XHAi4huuL7co:nBh+FM0oHADhuunJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b934c985112dc1858d59dffcbf73c57_JaffaCakes118

Files

0b934c985112dc1858d59dffcbf73c57_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2c44efcd7dab071a173d979b8da17f31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\eyWabui\mlnB\fjxnXqQw\cumr.pdb

Imports

gdi32

ExcludeClipRect
GetTextExtentPointW
CreateDiscardableBitmap
GetTextExtentPointA
DPtoLP
CreateFontA
GetDeviceCaps
EnumFontsW

comctl32

DestroyPropertySheetPage
InitCommonControlsEx
ImageList_ReplaceIcon

shlwapi

StrCmpNW

comdlg32

GetFileTitleW
PageSetupDlgW
PrintDlgW

user32

GetDCEx
SetParent
ShowScrollBar
GetPropW
SetLastErrorEx
LoadAcceleratorsW
CreateWindowExW
IsCharUpperA
LoadCursorA
WaitMessage
GetWindowLongW
MessageBoxW

kernel32

lstrcmpiW
GetWindowsDirectoryW
CreateWaitableTimerW
GlobalFindAtomW
GetCurrentThread
LocalReAlloc
GetProcAddress
SetHandleInformation
CreateFileW
LoadLibraryW
GetStartupInfoW
lstrlenW

Exports

Exports

?oJEqkddgVC@@YGPAMPAHPAH@Z

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c44efcd7dab071a173d979b8da17f31

Headers

File Characteristics

PDB Paths

Imports

gdi32

comctl32

shlwapi

comdlg32

user32

kernel32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 94B

.temp Size: 76KB - Virtual size: 76KB

.data Size: 5KB - Virtual size: 17KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 94B

.temp
Size: 76KB - Virtual size: 76KB

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB