3d005df0bfe8a5e337cb3ae7a77eb1a8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3d005df0bfe8a5e337cb3ae7a77eb1a8_JaffaCakes118
Size

124KB
MD5

3d005df0bfe8a5e337cb3ae7a77eb1a8
SHA1

5b4aadd8bd8b1e4d09dc06610d450c56cd4c98c7
SHA256

9a0d20eb578497b7dba20db2900034a514e02aeaa7bef55a40a17508169ef9da
SHA512

7d5e0d1b09bf238ebc0ef1b130eee76cfa51bb71f82c69ebdbdef26586ac8c7f66d2b7a209b6e5d30c15c0d490018790d2e45f73cef14afd8a51fbf516a43ad9
SSDEEP

3072:LeDdr8/jK4mbV9rugy4Vxcpp21FzpYx7G:LSr8/OB99yD2DM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d005df0bfe8a5e337cb3ae7a77eb1a8_JaffaCakes118

Files

3d005df0bfe8a5e337cb3ae7a77eb1a8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ddedbc05329f22d64a43770dc6a0150e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\fyph\jwcSzu\ISWFrcUZ.pdb

Imports

user32

DialogBoxParamA
IsIconic
CharLowerW
CallWindowProcW
LoadStringA
CreateWindowExW
IsDialogMessageA
DefFrameProcA
CharPrevW
GetMessagePos
DestroyIcon
SendDlgItemMessageW
GetMenuStringW

shlwapi

StrSpnA
PathMakePrettyW

kernel32

GlobalAlloc
GetCurrentThreadId
GetWindowsDirectoryW
OpenFileMappingA
ExitProcess
GetCurrentProcessId
EscapeCommFunction
InterlockedExchange
InterlockedExchangeAdd
LoadLibraryW
SetFileAttributesW

comctl32

ImageList_Destroy
ImageList_GetIconSize

ntdll

_stricmp
memset

gdi32

GetTextCharsetInfo
EndPath
CreateEllipticRgnIndirect
SetViewportExtEx
FillRgn
GetViewportOrgEx

Exports

Exports

?_xd__txiJwsjgtH_WE_W@@YGXIJ@Z
?_wf_kqorcc_@@YGPAEK@Z
?s_____yuX__OX_uusidor@@YGKM@Z
?_HOe_wfgg_V_@@YGXFPAF@Z
?Z_bn_pyslo@@YGEPAIE@Z
?hxlcg__c_QTC@@YGGPAEH@Z
?___y_yxeP__ZAgmgrxd_YR@@YGKH@Z
?_cx_ojL_C@@YGPAMPAED@Z
?__TO__UO@@YGXFF@Z
?zgg_zo_wqmJSXDHDGyhv@@YGPAXPAE@Z
?clytZlpiz__d@@YGN_ND@Z
?uW___TIIVI_LE_HCYktx@@YGDEF@Z
?lfvqbNv_d@@YGPAI_N@Z

Sections

.code
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 635B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddedbc05329f22d64a43770dc6a0150e

Headers

File Characteristics

PDB Paths

Imports

user32

shlwapi

kernel32

comctl32

ntdll

gdi32

Exports

Exports

Sections

.code Size: 24KB - Virtual size: 23KB

.data Size: 3KB - Virtual size: 335KB

.rdata Size: 87KB - Virtual size: 86KB

.edata Size: 1024B - Virtual size: 635B

.import Size: 1024B - Virtual size: 1020B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.code
Size: 24KB - Virtual size: 23KB

.data
Size: 3KB - Virtual size: 335KB

.rdata
Size: 87KB - Virtual size: 86KB

.edata
Size: 1024B - Virtual size: 635B

.import
Size: 1024B - Virtual size: 1020B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB