5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118

General

Target

5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118
Size

53KB
MD5

5a5568f626972d591e64e1061f6fb1e0
SHA1

118d313b48bc085df21d91a93a0156b005f420d5
SHA256

b1ee9cc2f93caffc4876f17acd35e798b4a09eac879a6361ed7b310422c557cc
SHA512

8538bf47349c6fd91240ac51007fb9856dd946fa42a3a13a0e521e15beeed723943b5e971c21ac6d57e0860e8a5b10251bbec309f163a6d1fd4b2c928349491a
SSDEEP

768:46fVAK2hLxC+OmPNw19Kc88P5hUbYAuCKzVHWFd3kzV/SdP3Ny89M2d95lp+JkcL:4VK2BNq9KclTAu/xWr34/2Fy8LDSJXLb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118

Files

5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1ed53d227d9c405b89d0411357bc85c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\PxxaD\eVDtyku\Pmpp\vfrbiVr\Mwop.pdb

Imports

gdi32

ScaleWindowExtEx
CreateFontIndirectW
DeleteObject
CreatePen
SetMapMode
CreateDIBitmap
GetTextMetricsW

shlwapi

PathGetArgsA

user32

GetAsyncKeyState
AdjustWindowRectEx
CharPrevA
SendDlgItemMessageW
InvertRect
SetTimer
GetCaretPos
DrawTextExW
GetForegroundWindow
GetWindowRect
SetPropW
IsCharAlphaW
wsprintfA
IsWindowEnabled

kernel32

LocalSize
HeapWalk
lstrcmpiA
InterlockedExchange
lstrcmpA
UnlockFile
RemoveDirectoryW
GetComputerNameExW
GlobalUnlock
LoadLibraryExW
GlobalAddAtomW
SleepEx
GetCommTimeouts

Exports

Exports

?ysQrqjtgjatfqGwgcciY@@YGEPAG@Z
?iCeTmilzqmCz@@YGEPANN@Z
?zKAzwbvr@@YGXPAE@Z
?bfdoqgtjeubDdbPwhrvzf@@YGXHE@Z
?kzkwtcN@@YGKPAG@Z
?nKaaBLqgvggmoKxIb@@YGDPAK@Z

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ed53d227d9c405b89d0411357bc85c4

Headers

File Characteristics

PDB Paths

Imports

gdi32

shlwapi

user32

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.itext Size: 1KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 198KB

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.itext
Size: 1KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 198KB

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 1KB - Virtual size: 1KB