2f94c25c13d61a0b98a7802c1dbb4ac1_JaffaCakes118

General

Target

2f94c25c13d61a0b98a7802c1dbb4ac1_JaffaCakes118
Size

116KB
MD5

2f94c25c13d61a0b98a7802c1dbb4ac1
SHA1

ca8c046b9e9e2f872841271526c1a2ab2c7c1058
SHA256

e94a03d672375524e7f770ba7483cfd247f6dd08b93948a4c502d0503b6fcb7a
SHA512

8b1e2b259be06e9e0a55ddaf19edb72b3493fa0b35ef297d99f44e4b46b212588a254f9c5cc117555fc054b2b38a67e9baff4f639a6b5efb6027a5d419a03dac
SSDEEP

3072:2D6d1kJ/DJ92AFg3oPKu1RhsMHajXym2o3Ss:hvkZL2AC3oPKIJDjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f94c25c13d61a0b98a7802c1dbb4ac1_JaffaCakes118

Files

2f94c25c13d61a0b98a7802c1dbb4ac1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9bbf8050b5d5d583456e5f3320983f49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\hnfmdq\ZsElEH\Oywdtc.pdb

Imports

ntdll

_aullrem

user32

CreateIconFromResource
MapVirtualKeyW
AdjustWindowRect
GetScrollPos
ShowScrollBar
GetWindow
DefDlgProcA
GetMenu
PeekMessageA
GetClassInfoW
GetKeyboardLayoutNameW
SetDlgItemTextA
LoadIconW
SendMessageTimeoutW

kernel32

ConvertDefaultLocale
GetDateFormatW
lstrcmpiA
GetOverlappedResult
GetModuleHandleW
FindResourceExW
GetExitCodeThread
TransactNamedPipe
SetLocalTime
GetProcAddress
lstrcpynW
lstrlenW

gdi32

GetTextFaceW
TextOutW
CreateBrushIndirect
EnumFontFamiliesExW
SetPaletteEntries
PtInRegion
EnumFontFamiliesW
SetWindowExtEx

Exports

Exports

?eaXvAZyInwqKdpfyfa@@YGMG@Z
?AjwdkwguiyjzktqmffI@@YGPANK@Z
?hwUjUhjBWmXwmlW@@YGGF@Z
?ZtKtote@@YGEK@Z
?bikxaUirasfOICVjfgdht@@YGPANPADI@Z
?uOedpJkKjbqptzgexnVj@@YGPAFEPAH@Z

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bbf8050b5d5d583456e5f3320983f49

Headers

File Characteristics

PDB Paths

Imports

ntdll

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 78KB - Virtual size: 78KB

.edata Size: 1KB - Virtual size: 1KB

.crt Size: 3KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 78KB - Virtual size: 78KB

.edata
Size: 1KB - Virtual size: 1KB

.crt
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 3KB