2b3392ab87a9252a26288dd7092be409_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b3392ab87a9252a26288dd7092be409_JaffaCakes118
Size

491KB
MD5

2b3392ab87a9252a26288dd7092be409
SHA1

3b3b389822cf6ec60c8b4bce905f71ec04d6ce7b
SHA256

c7221b0f10c4f307ad96ee73bfc0f8652ff94d30a0292280f0d35fcf17cedad9
SHA512

07a07f3f19183f6026c58644ba631cb17abefccd496a3cfb3c7cb705f7cabd3846ccd9abf59c41d49e14b10b1c4497e29f8392c87945af0a911150bb81cbeec2
SSDEEP

12288:2x6dVHahHiSS8Nqi0SY5nuhf+2iO221Je71K3uZWmxto9N:28dVHVSSs0Sy39Ay5IuZWmLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b3392ab87a9252a26288dd7092be409_JaffaCakes118

Files

2b3392ab87a9252a26288dd7092be409_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b49a49baba4f5f985fffdb3c7ae77ede

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\ogxjy\ucMoCh\pdfHh\mPDcMk.pdb

Imports

shlwapi

ord29
StrSpnA

gdi32

GetTextMetricsW
GetNearestPaletteIndex
StartPage
SetLayout
PolyBezier
GetDIBColorTable

comdlg32

ChooseColorW
GetSaveFileNameA
PrintDlgExW
ChooseFontW

comctl32

InitCommonControlsEx
ImageList_GetImageCount
ImageList_Destroy
ImageList_ReplaceIcon

user32

IsDlgButtonChecked
PostQuitMessage
FindWindowA
IsWindowEnabled
LoadImageW
IsWindowVisible
DrawEdge
CharNextA
ScreenToClient
CharLowerBuffW
SetCursorPos
DeleteMenu
LoadBitmapA
InvalidateRect

ntdll

_stricmp

kernel32

SetCommBreak
GetTempPathA
GetStringTypeExW
GetCurrentProcessId
IsBadWritePtr
GetBinaryTypeW
GetComputerNameW
ExitProcess

Exports

Exports

?ZQ_MUVOzkki_ftie_pec_@@YGFJ_N@Z
?_F_OLRLCK_T_IY@@YGPAFK@Z
?USTD_F_TC@@YGFM@Z
?_QXNITJohQZLSB@@YGEPAK@Z
?kkXZZ_VWWzat_OmiZTP@@YGPANIPAF@Z
?fkeh_PZ_AZg_@@YGPAXMI@Z

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 257KB - Virtual size: 741KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.export
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b49a49baba4f5f985fffdb3c7ae77ede

Headers

File Characteristics

PDB Paths

Imports

shlwapi

gdi32

comdlg32

comctl32

user32

ntdll

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 257KB - Virtual size: 741KB

.rdata Size: 210KB - Virtual size: 210KB

.idata Size: 1KB - Virtual size: 1KB

.export Size: 1024B - Virtual size: 548B

.rsrc Size: 3KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 257KB - Virtual size: 741KB

.rdata
Size: 210KB - Virtual size: 210KB

.idata
Size: 1KB - Virtual size: 1KB

.export
Size: 1024B - Virtual size: 548B

.rsrc
Size: 3KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB