1c82f6ad5df7413d4bb27b980594665b_JaffaCakes118

General

Target

1c82f6ad5df7413d4bb27b980594665b_JaffaCakes118
Size

145KB
MD5

1c82f6ad5df7413d4bb27b980594665b
SHA1

e2697628f8781fcf8a3316b539c1c7ce2820e479
SHA256

0da04013a837d1a4c9331a49235b3e935e839a73b1f48ae540a52c7a07b3739d
SHA512

031fc1df13e291abd418d54fb6d6c521b239108cd6c6c1239d5bc87c35998cb32378895eb39e63e0c5dd3da376855e81c665f84b82d8e593347be116ccaba9d2
SSDEEP

3072:bT3I4+6AjK0H+ZHiXuB3wsO3i1SSgQykxRM9X5U58Jkc7:bTJ+ov+u95SAvxyc58Jkc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c82f6ad5df7413d4bb27b980594665b_JaffaCakes118

Files

1c82f6ad5df7413d4bb27b980594665b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8d4d2d02ede7121e84f763d531049b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\xpFgigdi\yRvocpr\auqqC.pdb

Imports

gdi32

IntersectClipRect
OffsetViewportOrgEx
SelectClipRgn
EndPage
CreateBitmap
Ellipse

kernel32

WaitForSingleObjectEx
SetMailslotInfo
CreateSemaphoreW
GetCurrentProcessId
GetCurrentThread
ExitThread
SetFilePointer
GetUserDefaultUILanguage
FileTimeToLocalFileTime

user32

GetMenu
DialogBoxParamW
FillRect
DrawStateW
GetDCEx
GetActiveWindow
keybd_event
LoadIconW
SetWindowLongA
LoadAcceleratorsA
wvsprintfA
TranslateAcceleratorW

ntdll

wcslen

Exports

Exports

?gwsgeNzhsjdmomsZTTzq@@YGPAKK@Z
?ktxdndzmaU@@YGPAHPAJ@Z
?OYrvPSmFDlyzhlLw@@YGDNPAN@Z

Sections

.text
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 454KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8d4d2d02ede7121e84f763d531049b6

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

user32

ntdll

Exports

Exports

Sections

.text Size: 512B - Virtual size: 128B

.code Size: 22KB - Virtual size: 22KB

.rdata Size: 34KB - Virtual size: 34KB

.edata Size: 1KB - Virtual size: 1KB

.data Size: 83KB - Virtual size: 454KB

.rsrc Size: 1024B - Virtual size: 828B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 128B

.code
Size: 22KB - Virtual size: 22KB

.rdata
Size: 34KB - Virtual size: 34KB

.edata
Size: 1KB - Virtual size: 1KB

.data
Size: 83KB - Virtual size: 454KB

.rsrc
Size: 1024B - Virtual size: 828B

.reloc
Size: 1KB - Virtual size: 1KB