17940266ccc1963774e10fa8f049227f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

17940266ccc1963774e10fa8f049227f_JaffaCakes118
Size

96KB
MD5

17940266ccc1963774e10fa8f049227f
SHA1

65ef576e600f907a24d8fdf4a368462beaebb6bf
SHA256

ada51570381e81291b1821144f72f9cd35f24df6fde9ab4f9232d22b9320d986
SHA512

847cf413c5ebed62bcbcafed940d654ebed1907021b31cd1dd6309bf7be37707008c75b20ab677403edda0257719a075d2f2fab1b944009c93bf29bd2a00f44c
SSDEEP

1536:8uxfKXwQWDHSyVOc7kOiOgVkc+TBsYuPKw0yMkdcucYdV8LuQfRl32oAG:8edQK/OA0CvUMEcodV8l32LG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17940266ccc1963774e10fa8f049227f_JaffaCakes118

Files

17940266ccc1963774e10fa8f049227f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a9855025712805e8cc8d86f276d573e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\KDEGfwW\sajI\uVwBt\tfztj\KWad.pdb

Imports

shlwapi

PathFindFileNameW

user32

PostThreadMessageA
LoadStringW
EnumWindows
SendDlgItemMessageA
UnionRect
ExitWindowsEx
LoadCursorW
ReleaseDC
MessageBoxA
GetMenuItemRect
GrayStringW
GetMenuState

comdlg32

PageSetupDlgW
PrintDlgExW

comctl32

CreateToolbarEx
ImageList_Write
ImageList_ReplaceIcon

gdi32

GetSystemPaletteUse
CreateEllipticRgnIndirect
LPtoDP
CreateDiscardableBitmap
RemoveFontResourceW

kernel32

UnlockFile
HeapAlloc
GetCurrentThread
GetCurrentProcessId
LoadResource
lstrcmpA
ExitThread
GetNumberFormatA

Exports

Exports

?erumuod_c@@YGXIPAM@Z
?oDLVVGJ_ZIGTR@@YGXJPAD@Z
?FKR_ALhw_ddfk_jdaE@@YGJ_N@Z
?vkiz_o__e@@YGPAFMI@Z
?inptvDw_xbsz_@@YGNDF@Z
?NAsQDWQrq_bdr_@@YGDKH@Z
?wsburk_skg_aduqtdb_UXT@@YGJPAHPAF@Z
?CIQLLt_ia_axgnhl__y_@@YGJD@Z

Sections

.text
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9855025712805e8cc8d86f276d573e5

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

comdlg32

comctl32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 148B

.code Size: 23KB - Virtual size: 22KB

.data Size: 14KB - Virtual size: 137KB

.rdata Size: 52KB - Virtual size: 52KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 148B

.code
Size: 23KB - Virtual size: 22KB

.data
Size: 14KB - Virtual size: 137KB

.rdata
Size: 52KB - Virtual size: 52KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB