0c45932210f79713babfaa23bacba64c_JaffaCakes118

General

Target

0c45932210f79713babfaa23bacba64c_JaffaCakes118
Size

173KB
MD5

0c45932210f79713babfaa23bacba64c
SHA1

3941066d6a99fced506b540078e4ca0feda5408f
SHA256

e3a0e394ebe8a1b8c0ec1dbef810ae89750575728459ae00b3c63d53c330a2cb
SHA512

e889657d22a8663582c79413fe87eca5ac7a7dafe22f341a27f295cbb2eaaf2605ce585f0a220ade6111a5a5e8fa69ba1eb089608846e95280d8d14702b50d23
SSDEEP

3072:sDicZSHNXhc9g8fx0+LHPBfz9jGRN+ICrrJ7ztDopNZXLUFATtKhN6FSkGcdFH:sun8g8fxjDPBL9jGRNMrd7z6QFAJaWRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c45932210f79713babfaa23bacba64c_JaffaCakes118

Files

0c45932210f79713babfaa23bacba64c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bb67ecc176754049d1f3da253630e0ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

A:\SukpsPqy\irus\lzRjbzO\hOeFnDb\zbjF.pdb

Imports

gdi32

PtInRegion
GetTextExtentExPointW
SetTextColor
GetSystemPaletteEntries
SetAbortProc
SetLayout
EnumFontsW

kernel32

VerSetConditionMask
GetModuleHandleW
CloseHandle
CreateSemaphoreW
SetHandleCount
FindFirstFileA
DuplicateHandle
GetModuleHandleA
CreateEventW
GetThreadLocale
GetTickCount
GetComputerNameA
GetProcAddress
RegisterWaitForSingleObject
GlobalMemoryStatus

user32

LoadCursorW
GetWindow
AdjustWindowRect
GetClassLongA
MenuItemFromPoint
GetSubMenu
IsDialogMessageA
ModifyMenuW
CreateWindowExA
LoadCursorA
GetMessageA
GetMenu
IsCharLowerA
DrawMenuBar

Exports

Exports

?uunozuQkOKaoOMHi@@YGKG@Z
?xCnggicqvhpvdLwb@@YGPAID@Z
?xLKdwwUaxdabKktxrFyg@@YGXJF@Z
?azFfsbesjRzIFm@@YGMH@Z
?xQohfvhw@@YGXPAKPAM@Z

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 239B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb67ecc176754049d1f3da253630e0ac

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 82KB

.edata Size: 512B - Virtual size: 239B

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 146KB - Virtual size: 146KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 82KB

.edata
Size: 512B - Virtual size: 239B

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 146KB - Virtual size: 146KB

.reloc
Size: 2KB - Virtual size: 1KB