296334347e26b14e8ca0524f8713ccb7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

296334347e26b14e8ca0524f8713ccb7_JaffaCakes118
Size

98KB
MD5

296334347e26b14e8ca0524f8713ccb7
SHA1

2c71f58767896072e91b64fd39f56fdbba05dd71
SHA256

7af633d6baf5d68fba6a5cc849cb19355a10107bb83a6efbcb904daa541907a0
SHA512

3500d4749dc09a930766e2b23d66b512b8eb71466967f7313e6765b5f0e42f7cb4fbc7ef36b1967435e25091eddacc72690aeeca681613a705a344f9806ce06c
SSDEEP

1536:3rqeNNfe4hzxLJuTbptW1oYd+EGd6pX2P8dtbfJQ3hzepa7/vqgro63:3rLNNfnLJuptebXC+teRzewvqSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296334347e26b14e8ca0524f8713ccb7_JaffaCakes118

Files

296334347e26b14e8ca0524f8713ccb7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fa3190f1f2570fcc547e7d5dabb0fc7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\qjquiot\enxX\lxZL\ehYyvu\jOmztb.pdb

Imports

kernel32

ResetEvent
CreateEventW
GetTickCount
MoveFileW
GetUserDefaultLangID
LoadLibraryW
CopyFileW
GetProcAddress
GlobalUnlock
CloseHandle
GetThreadLocale
GetModuleHandleA
CreateSemaphoreW
GetCurrentDirectoryA
GetModuleHandleW
CancelWaitableTimer

gdi32

GetRgnBox
CreateRectRgnIndirect
CreatePalette
StretchBlt
Polygon
RealizePalette
GetObjectW

comctl32

ImageList_AddMasked
PropertySheetA
ImageList_LoadImageW
ImageList_GetIconSize

user32

LoadAcceleratorsA
TranslateAcceleratorW
GetWindow
GetMessageExtraInfo
GetClassWord
RemoveMenu
GetWindowTextW
DestroyAcceleratorTable
GetSystemMenu
DialogBoxIndirectParamA
LoadCursorA
CharToOemBuffA
GetMenu

Exports

Exports

?OasLVlAUgWXrc@@YGPAFN@Z
?bopNxKcoziQtMrtRQmXma@@YGJPAJPAF@Z
?NqcnieGbjrlfYif@@YGKPA_NF@Z
?PcijfpafzW@@YGDPAF@Z
?zajaazWuspjnGjJHpbzJk@@YGPAIH@Z

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa3190f1f2570fcc547e7d5dabb0fc7d

Headers

File Characteristics

PDB Paths

Imports

kernel32

gdi32

comctl32

user32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.edata Size: 512B - Virtual size: 252B

.data Size: 2KB - Virtual size: 14KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 75KB - Virtual size: 75KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.edata
Size: 512B - Virtual size: 252B

.data
Size: 2KB - Virtual size: 14KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 75KB - Virtual size: 75KB

.reloc
Size: 2KB - Virtual size: 1KB