192120ebb8ba96bbfac7931b3da9de78_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

192120ebb8ba96bbfac7931b3da9de78_JaffaCakes118
Size

220KB
MD5

192120ebb8ba96bbfac7931b3da9de78
SHA1

6419820290c27cc1bab939f4497c95269fdb3824
SHA256

2c2d2617a9547bf212908b673608f71494cede075aad06d7f428a68e565e352f
SHA512

440383e1f8773c75cd43a43f0aab8940e3896b04d801b1338a65080908fa13ed084ab018a68389857136cb482c3cdac534da35b3dc508c1dec1cd8eddb31e65c
SSDEEP

6144:NBWCA5k3TmRDMJUO+Lq3ywZ+yor5FniLocsYV4Fzd:NBWCV3T2DMJUO+uCwtorOrVW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
192120ebb8ba96bbfac7931b3da9de78_JaffaCakes118

Files

192120ebb8ba96bbfac7931b3da9de78_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1969643756818ebf42a6352d9b244238

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\nUqrs\bwoG\lyFVf.pdb

Imports

user32

SetScrollInfo
SetRect
GetDialogBaseUnits
PostQuitMessage
DialogBoxIndirectParamW
SystemParametersInfoA
PostMessageW
GetActiveWindow
CharUpperW
DrawAnimatedRects
GetWindowTextA
CallWindowProcW
EnumChildWindows

gdi32

LineDDA
GetROP2
SetLayout
CreatePen
CreateBitmapIndirect

kernel32

HeapUnlock
ExitThread
GetShortPathNameA
CreateThread
GetStartupInfoW
PulseEvent

comctl32

CreateStatusWindowW
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_Write

Exports

Exports

?shvdMXTH_CA_@@YGKIPA_N@Z
?_FMMHUGUYZVmPWR@@YGPAMHK@Z
?ccbqxm_hMMKEJOYiapurU@@YGPAX_NG@Z
?_TRd_dc__QMXZ@@YGPAH_N@Z
?gKJTDLKn_em@@YGHPAIPAE@Z
?YNQU_WT_IWIP_ZQXXEVS@@YGEH_N@Z
?SLEU_BBFu__zfl___@@YGKPAFN@Z
?x__fneqTYTCKeirU@@YGFID@Z
?I_WI_KGMXXYrukzYPC@@YGPAXPAIE@Z
?_tJErsgaih_e@@YGPAXPAJ@Z
?_v__yzUU____RCNde@@YGPAHJ@Z
?Y_BAPQBVWF_IS@@YGFDK@Z
?qzocl_oltjgski@@YGIPAG@Z
?j_wk_bjhnw@@YGPANPAD@Z
?onjvlowa_m_cwibi_mma_p@@YGDPAGH@Z
?ATAIVfhcf@@YGPAEG@Z
?__AKCQCCcFWVC_tWPOSZYx@@YGFPA_N@Z

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Info
Size: 112KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1969643756818ebf42a6352d9b244238

Headers

File Characteristics

PDB Paths

Imports

user32

gdi32

kernel32

comctl32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 512B - Virtual size: 187B

.data Size: 1KB - Virtual size: 1KB

Info Size: 112KB - Virtual size: 275KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 512B - Virtual size: 187B

.data
Size: 1KB - Virtual size: 1KB

Info
Size: 112KB - Virtual size: 275KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB