5d875431710ff86e79317cfd583a683a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5d875431710ff86e79317cfd583a683a_JaffaCakes118
Size

131KB
MD5

5d875431710ff86e79317cfd583a683a
SHA1

f99f78fd19d7573f78e5ab436824b5d6e7c5dc16
SHA256

6f55d11862b78e70573ddb87b56a4d40019fe9b9e7e3c4da8b59d6105246a6db
SHA512

4a34293975dff51b891ab96bac49ec0132ea81b0c8b66ba6e948e1459098dca984868e11449fd92a7e3973268438b70ae6e34a42f0af6b199d836d0c7c1462ae
SSDEEP

3072:180BotpXewLmRkXmiQxng5Mv+5hCxUZwv5FUUi+PZHtINwib7+9OJN:18eoKGXRQxgqGTCxUQJi+PhtINpgOJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d875431710ff86e79317cfd583a683a_JaffaCakes118

Files

5d875431710ff86e79317cfd583a683a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0bdb33284b641710dccbfe5d932333ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DestroyPropertySheetPage
ImageList_LoadImageW
ImageList_Read
ImageList_Create

shlwapi

StrPBrkW
StrTrimW
PathIsLFNFileSpecA

user32

DrawIconEx
GetForegroundWindow
ReplyMessage
ClientToScreen
GetWindowWord
GetParent
GetDC
SetCaretPos
GetMessagePos
DestroyAcceleratorTable
ClipCursor
GetMessageTime
GetCursorPos
LoadAcceleratorsW
GetScrollRange
MapDialogRect

kernel32

CreateTimerQueue
FreeResource
CreateMailslotW
GetStartupInfoA
GetBinaryTypeW
lstrlenW
HeapUnlock
DeleteTimerQueue
FlushFileBuffers
GetOverlappedResult
lstrcpyA
GetThreadLocale
ReleaseMutex
SetMailslotInfo

gdi32

CreateCompatibleDC
DeleteDC
GetViewportOrgEx
RealizePalette
RoundRect
GetTextFaceW
CreateDIBSection
ResizePalette
SelectPalette

comdlg32

GetOpenFileNameA
ChooseFontW
FindTextW

Exports

Exports

_XuJghukw_fcktse
_HomzqLoo_guAjnCrdq
_HmWgzmJww_gypjucbSZj
?_CopyMetaFileW@@YGKKK@Z
_Fytpmghe_kubpezcw_hs
_Itqpenrjo_kumyzD
_DYrpzaev_KkqhknpghQ

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CDat_3
Size: 3KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CDat_1
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CDat_2
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CDat_5
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bdb33284b641710dccbfe5d932333ad

Headers

File Characteristics

Imports

comctl32

shlwapi

user32

kernel32

gdi32

comdlg32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 2KB

.CDat_3 Size: 3KB - Virtual size: 211KB

.CDat_1 Size: 82KB - Virtual size: 82KB

.CDat_2 Size: 6KB - Virtual size: 6KB

.CDat_5 Size: 3KB - Virtual size: 3KB

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 2KB

.CDat_3
Size: 3KB - Virtual size: 211KB

.CDat_1
Size: 82KB - Virtual size: 82KB

.CDat_2
Size: 6KB - Virtual size: 6KB

.CDat_5
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB