2163dda3339a642a528f7874f1f10f63_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2163dda3339a642a528f7874f1f10f63_JaffaCakes118
Size

114KB
MD5

2163dda3339a642a528f7874f1f10f63
SHA1

e791525e860927286842e66e859ca71ba7938958
SHA256

94761e3c31d1b6a39247e805b5e935eb5a9c6b0eac2cba1c50ed11b7493b3574
SHA512

53e511fe3e992c7add3056fa538fb8f406fac407fd216c3c4b049b449aa7f01ee3b93663b6c2234ebd9da7b27c48c957b09ac8cb6cdce2d012c179104fb613e9
SSDEEP

3072:B6+5uGI39Xs0fQyC6TXaeB0n4C9d4j6HHO9:BpEDHDaP4jc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2163dda3339a642a528f7874f1f10f63_JaffaCakes118

Files

2163dda3339a642a528f7874f1f10f63_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3807e6be05df7640f736fdf512ab62ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\pwIhu\arTrclh\Ccnopx\mJzsCu\tHLxp.pdb

Imports

shlwapi

StrCmpNW

user32

GetPropW
ShowScrollBar
IsCharUpperA
CharLowerW
GetWindowLongW
GetWindowTextW
GetTopWindow
IsZoomed
PeekMessageA
GetUserObjectInformationW
SetMenu
SetTimer
SetSysColors

gdi32

BitBlt
GetNearestColor
DeleteDC
CreateBitmap
IntersectClipRect
Rectangle
SetStretchBltMode
StretchBlt

comctl32

PropertySheetW
ImageList_Remove
ImageList_LoadImageW
CreateToolbarEx

kernel32

FindResourceExW
LoadLibraryW
GetAtomNameA
GetSystemTimeAsFileTime
GetOverlappedResult
GetProcAddress
LoadLibraryExA
lstrlenW
GetCommandLineA
SetCurrentDirectoryA
SearchPathW
lstrcmpiW
VirtualProtect

Exports

Exports

?axbkktHrWkusbtdbyHq@@YGXE@Z
?VfuwzcPtpsJRwkhqsgMtql@@YGNDF@Z

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3807e6be05df7640f736fdf512ab62ed

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

gdi32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 139B

.temp Size: 77KB - Virtual size: 77KB

.data Size: 5KB - Virtual size: 17KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 139B

.temp
Size: 77KB - Virtual size: 77KB

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 2KB