40f93644fb973c64863244cafc24e1ec_JaffaCakes118

General

Target

40f93644fb973c64863244cafc24e1ec_JaffaCakes118
Size

1.4MB
MD5

40f93644fb973c64863244cafc24e1ec
SHA1

4df90e966785b98b516006048a12ba1f842672d8
SHA256

a83ed1eeb14cf21bdffd9e486d099ff7de6a84008cde4460715a8a2bc3f995e7
SHA512

57de2b9a6dcae7ec94f80dc5e237d5b695a4a1685602e9881b39da3c2da3747063cc9c4854684e9d72659d6ed17ef5fc1a87e60a4f98dc323d63b1bf4192a49a
SSDEEP

24576:uFk4Mny8QlR4YH+OdpErzycoqXO9F70kIgr0NwoBfqZVFtAslyxrgudw:ToR4Gp6WIGF70a0Nc5sxrg3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40f93644fb973c64863244cafc24e1ec_JaffaCakes118

Files

40f93644fb973c64863244cafc24e1ec_JaffaCakes118
.exe windows:5 windows x86 arch:x86

daa4b98b3781c3dee6af9f3782eb8771

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\hLcbm\KImVso\sfWdq\IVumVezx.pdb

Imports

gdi32

SetTextAlign
SetAbortProc
TextOutW
StretchBlt
ExtFloodFill
CreateHalftonePalette
GetTextCharsetInfo

comctl32

DestroyPropertySheetPage
ImageList_Destroy
ImageList_Remove

kernel32

GetSystemDefaultLangID
LoadLibraryW
CreateFileMappingA
GetBinaryTypeW
GlobalReAlloc
LoadLibraryExA
GetProcAddress
GetFullPathNameA
SearchPathW
UnmapViewOfFile
GetAtomNameA
EnterCriticalSection
EscapeCommFunction

user32

RegisterClassW
GetDlgItem
SetCursorPos
GetClassLongW
FindWindowA
DestroyCursor
ScreenToClient
GetWindowRect
LoadStringA
TabbedTextOutW
EnableWindow
GetMessageA

comdlg32

GetSaveFileNameW
PrintDlgExW
PageSetupDlgW

Exports

Exports

?ulSwnJusia@@YGPADPAF@Z
?advekcgabsoxcDaa@@YGFD@Z
?fuNgQQyTOdIvwoEv@@YGPAXDPAG@Z
?bzbIpOthAwemvGaeegbQi@@YGPAMD@Z
?fHgFmtv@@YGIH@Z
?WWQtqxnefEizabi@@YGGPAJ@Z
?dWeEqeNA@@YGDPAEPAI@Z

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

daa4b98b3781c3dee6af9f3782eb8771

Headers

File Characteristics

PDB Paths

Imports

gdi32

comctl32

kernel32

user32

comdlg32

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 6.5MB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 6.5MB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 4KB - Virtual size: 3KB