0e3dd40bef988eec6f8db3f247db5e6f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0e3dd40bef988eec6f8db3f247db5e6f_JaffaCakes118
Size

115KB
MD5

0e3dd40bef988eec6f8db3f247db5e6f
SHA1

d42b4129f9c271115f281ece600dedcff6a4c628
SHA256

237cabc4667721bb814ee25efabe064e6eded755feaa2e575957e8561918ef49
SHA512

14369279a28e0bc73b433bf1cd57850b9962a6b25a4db712c5f77667e62484dbd29a13446824ee96919342473a8e859eaef5ad73d3d6e7fde58b4d63c20e7bf4
SSDEEP

3072:MNFm9nbyKnerhkDzeP6IpGd1n/7KKTTFS:k6nbyKeVkPeP6nKKlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e3dd40bef988eec6f8db3f247db5e6f_JaffaCakes118

Files

0e3dd40bef988eec6f8db3f247db5e6f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

a416d7f4e72b7531079028e162d127cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

A:\dlexo\GeWhfjBG\rSft\wsus\tlraip.pdb

Imports

gdi32

CreateCompatibleBitmap
GetObjectA
SetDIBColorTable
EndPath
SetAbortProc
GetSystemPaletteEntries
RectInRegion

user32

SetClassLongW
SetLastErrorEx
ShowScrollBar
PostMessageA
ModifyMenuW
IsDialogMessageW
SetPropW
SetRect
AppendMenuA
GetPropW
GetWindowLongW
IsCharUpperA

shlwapi

StrCmpNW

comctl32

ImageList_ReplaceIcon
CreatePropertySheetPageW
InitCommonControlsEx
DestroyPropertySheetPage

kernel32

LoadLibraryW
WinExec
VirtualFree
GetFileType
QueryDosDeviceW
VerifyVersionInfoW
DeviceIoControl
LoadLibraryA
FindFirstChangeNotificationW
lstrlenW
GetProcAddress
lstrcmpiW

Exports

Exports

?nyGHShMleM@@YGXG@Z
?kqdNijQexvvRUw@@YGEF@Z
?FFioUqnhw@@YGFF@Z
?uugLaxiubkuedozu@@YGXPAKJ@Z

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a416d7f4e72b7531079028e162d127cc

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

shlwapi

comctl32

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.idata Size: 1024B - Virtual size: 1002B

.edata Size: 512B - Virtual size: 189B

.temp Size: 77KB - Virtual size: 77KB

.data Size: 5KB - Virtual size: 17KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 19KB

.idata
Size: 1024B - Virtual size: 1002B

.edata
Size: 512B - Virtual size: 189B

.temp
Size: 77KB - Virtual size: 77KB

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 2KB