5c4859a4a484b81920705022a8b60d81_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5c4859a4a484b81920705022a8b60d81_JaffaCakes118
Size

121KB
MD5

5c4859a4a484b81920705022a8b60d81
SHA1

02325799472bc776c8eecf253648d563db762246
SHA256

93539ab0d16f09436795db6c00e8c623c8335f763f63d4b43f52b35e469f65a8
SHA512

800f7d04ad6b264d9ba1fe5160cd1ad3cce588cd0ad724e950c4e9f93521960c36b210ae60dc379bfd0f84b4ac846225de2c2525b4421d0855e21fb59adfd96b
SSDEEP

3072:cT3u81d1NeNJtJ+oPqWAGnnGmsbBh1L7wV3:cTB4NhiWAGnG1Bh1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c4859a4a484b81920705022a8b60d81_JaffaCakes118

Files

5c4859a4a484b81920705022a8b60d81_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5cf6643af36ac9a1c7366c553553dab1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\CzZOD\qslbs\OmzOc\DOMiu.pdb

Imports

user32

SetWindowPlacement
InsertMenuA
GetWindowTextLengthW
CopyRect
CheckDlgButton
GetWindow
DialogBoxIndirectParamW
DispatchMessageA
LoadIconA
LoadAcceleratorsA
CreateMenu
PostThreadMessageA

ntdll

wcslen

gdi32

GetTextMetricsW
GetCurrentObject
Polyline
DeleteDC
SetMapMode
CreatePenIndirect

kernel32

GlobalAddAtomW
GetPriorityClass
EnumResourceNamesW
GetHandleInformation
CreateThread
GlobalHandle
GetDateFormatA
GetCurrentProcessId
ExitThread

comctl32

ImageList_AddMasked
DestroyPropertySheetPage
CreateStatusWindowW
CreateToolbarEx

Exports

Exports

?dDhmapmxPcyDlvsshbdkv@@YGPAJPANM@Z
?hovXPMYSoLwseerso@@YGNK@Z
?wkHUfYYrteYkdu@@YGIPAJPAI@Z
?suLhmwmMh@@YGXE@Z

Sections

.text
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cf6643af36ac9a1c7366c553553dab1

Headers

File Characteristics

PDB Paths

Imports

user32

ntdll

gdi32

kernel32

comctl32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 148B

.code Size: 23KB - Virtual size: 22KB

.rdata Size: 63KB - Virtual size: 63KB

.edata Size: 1KB - Virtual size: 1KB

.data Size: 29KB - Virtual size: 360KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 148B

.code
Size: 23KB - Virtual size: 22KB

.rdata
Size: 63KB - Virtual size: 63KB

.edata
Size: 1KB - Virtual size: 1KB

.data
Size: 29KB - Virtual size: 360KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB