4ad3a61a88d990bb67bedbae0489d774_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4ad3a61a88d990bb67bedbae0489d774_JaffaCakes118
Size

147KB
MD5

4ad3a61a88d990bb67bedbae0489d774
SHA1

ebf60c6883166eac1d0d1d07964bf1571ef9d0aa
SHA256

104b272636d73bf9741c8e8e22efc9bc1e9a01e298811e22910a4230b7e14d17
SHA512

d538d3f6d518a56f378c2fba695674a3c1cb819db89b92cd12d533bf116523d291b5fc59723b6155a5ba826fa5ecebc68ec0b6cc1f2299c7eeb20d4c4580d587
SSDEEP

3072:d2dIUGz8hjU3AIpas6MulQ80D2E4al/sJpt6uAClIMHWv:IGxAgasdsA2EV/kllIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ad3a61a88d990bb67bedbae0489d774_JaffaCakes118

Files

4ad3a61a88d990bb67bedbae0489d774_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1527b4343c1fc880ad461dff926b8b1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\GxidHwz\uotLzqd\mPvmj\gsyzzgmb\Atuaga.pdb

Imports

comdlg32

GetFileTitleW
PrintDlgW
GetSaveFileNameA
ChooseFontW

gdi32

SetDIBitsToDevice
UnrealizeObject
SetStretchBltMode
GetNearestColor
SetBitmapBits
SetViewportOrgEx

kernel32

CopyFileW
HeapUnlock
GetCommState
FlushFileBuffers
IsValidLanguageGroup
lstrcmpA
LoadLibraryA
lstrcmpiA
lstrcpyW

comctl32

ImageList_AddMasked
ImageList_GetImageCount
PropertySheetW

shlwapi

StrToIntW
UrlGetPartA
StrCpyW

user32

InSendMessageEx
ShowScrollBar
InSendMessage
ShowOwnedPopups
SystemParametersInfoW
AppendMenuA
CallWindowProcA
GetScrollInfo
GetMenuStringW
CharLowerBuffW
CreateIconFromResource
MessageBoxA
LoadIconA
RegisterHotKey

Exports

Exports

?PUQxaj___VV__@@YGMMPAG@Z
?prtl_i_sz_c___nRK_H_Z@@YGPAIPAM@Z
?j_iiI___WUDo_u_vw_vq@@YGNKPAJ@Z
?ZCH_PWSAlzkPI@@YGPAXH@Z
?_EvmI__til_IUFZ__KZFZ@@YGPAMD@Z
?xwguVU_VJL_@@YGDPAFPAK@Z
?__k_PSmio__GavP_H@@YGPAKPAH@Z
?_ypXU__NO_K_PU@@YGXG@Z
?vmiIE_U_IUYKVL@@YGPADPAE@Z
?oedzDPcxu@@YGJPAH@Z
?Kitg_qda__f_@@YGHF@Z
?hher_mjoa_xh__biZD@@YGGPAJH@Z
?olpyvqp_b_@@YGIJD@Z
?_ADWACU_F_UX_kjn@@YGPAKPAME@Z
?OIN_TJ_@@YGDH@Z

Sections

.text
Size: 54KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pacdat
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1527b4343c1fc880ad461dff926b8b1b

Headers

File Characteristics

PDB Paths

Imports

comdlg32

gdi32

kernel32

comctl32

shlwapi

user32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 214KB

.data Size: 38KB - Virtual size: 37KB

.pacdat Size: 15KB - Virtual size: 14KB

.idat Size: 14KB - Virtual size: 13KB

.rdata Size: 18KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 54KB - Virtual size: 214KB

.data
Size: 38KB - Virtual size: 37KB

.pacdat
Size: 15KB - Virtual size: 14KB

.idat
Size: 14KB - Virtual size: 13KB

.rdata
Size: 18KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 2KB