18420e3fba6f89fd282f420806cb4b32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

18420e3fba6f89fd282f420806cb4b32_JaffaCakes118
Size

147KB
MD5

18420e3fba6f89fd282f420806cb4b32
SHA1

10323313c4f77bc355be21f543a21aa6e977742e
SHA256

97ff5d55b45a92df32dd26f0a0a4fafe14dc2692ca368091d21529a125e532d0
SHA512

f7d44a027eca0b6de84c94f76a8632315ca7b0e0ef92d974af3e89118268f05fcda11ea29ff59a04f6d67bfe5cbb86acf546a25777694007ea15fefdad9b0009
SSDEEP

3072:MWfaGc6QTYyk0qJp2TNipIATwsqVwqeIWBJP+A7d2lp/SJrz:+GZlJeTkx1iM7ArSr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18420e3fba6f89fd282f420806cb4b32_JaffaCakes118

Files

18420e3fba6f89fd282f420806cb4b32_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1bda34f8b833f755d482088ebb54b61d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\Gvmo\MegiWi\OyPf\catn.pdb

Imports

user32

FindWindowExA
CascadeWindows
GetCursorPos
SetForegroundWindow
LoadBitmapA
SendMessageW
GetPropW
IsWindowEnabled
CreateCursor
DialogBoxIndirectParamA
GetDlgItemInt
LoadAcceleratorsW
SetUserObjectInformationW

kernel32

CreateWaitableTimerW
LocalSize
GetTickCount
AreFileApisANSI
lstrcpynW
FindClose
lstrcmpiA
lstrcpyA

shlwapi

UrlGetPartA
ChrCmpIA

gdi32

CreateDiscardableBitmap
GetTextAlign
StretchDIBits
GetTextMetricsA
CreateDCW
GetMapMode

comctl32

ImageList_Draw
PropertySheetA
ImageList_Destroy
CreateStatusWindowW

Exports

Exports

?__IYLBFEQWI__TR__N@@YGPAJJ@Z
?_LZN_SJ___VPFEGT@@YGPAHNE@Z
?yn_V_od_xi__eAJHKRY_D_@@YGPAKKN@Z
?AG_H_SN_MHNLZHjev@@YGXHJ@Z
?JDBC__IRa_J_@@YGXI_N@Z
?OSv_FRYTP__INQBrlt@@YGXNJ@Z
?V_BBQVdor_jsvg__h@@YGEE@Z
?caoruHAOGb_lj_zs_q@@YGXEJ@Z
?U_E_AGUd_kb@@YGXGI@Z
?fitJW_JNJss__ngZYR@@YGXG@Z
?YKJLihvzk_ys@@YGPAXD@Z
?o__jejvO_I_Z_JHF_@@YGFI@Z
?D_UP_Mhk_qhJ@@YGPAGPAEPAI@Z

Sections

.text
Size: 51KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pacdat
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bda34f8b833f755d482088ebb54b61d

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

shlwapi

gdi32

comctl32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 211KB

.data Size: 24KB - Virtual size: 24KB

.idat Size: 15KB - Virtual size: 14KB

.rdata Size: 28KB - Virtual size: 28KB

.pacdat Size: 17KB - Virtual size: 17KB

.rsrc Size: 7KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 51KB - Virtual size: 211KB

.data
Size: 24KB - Virtual size: 24KB

.idat
Size: 15KB - Virtual size: 14KB

.rdata
Size: 28KB - Virtual size: 28KB

.pacdat
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 7KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB