6ee66e197b9fb3ec584644fde7aaa7fd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6ee66e197b9fb3ec584644fde7aaa7fd_JaffaCakes118
Size

155KB
MD5

6ee66e197b9fb3ec584644fde7aaa7fd
SHA1

213b553d8ff3af2519f65b7a0118aa15bd6d083e
SHA256

152b2d4dfe5ec4055e2f475ed9ccb91e62dd0cafca9a665be7a4800470dfa402
SHA512

5ae384d58f12edbbd50d40ff0b6657ea5a30dc3e66b48804eb03fd8f59d778028e8de6c200151ec33196256682cc5d4b041b59397d9bee2d2eece61960223426
SSDEEP

3072:1llqty+vud2n0mHtSB2pxZ5usuEBxvhRLQW2BaNbxv6F6jj/opIqoPs:1llauyYB2pD56EBxvhZ5NFiF6B0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ee66e197b9fb3ec584644fde7aaa7fd_JaffaCakes118

Files

6ee66e197b9fb3ec584644fde7aaa7fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

42ae992b420b04a45f8cb092b5844287

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ceafct\orSjsqbp\jRMfqGu\lrVwV.pdb

Imports

comctl32

ImageList_GetIcon
InitCommonControlsEx

kernel32

ExitProcess
CallNamedPipeW
GetTickCount
GetWindowsDirectoryW
ExitThread
lstrlenW
OpenEventW
GetConsoleWindow
EnumResourceNamesA
GetCurrentProcessId
ReadFile
RaiseException

gdi32

CreateFontA
DeleteObject
SelectObject
CreateICW
GetStockObject
Rectangle

comdlg32

PrintDlgW
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW

shlwapi

StrToInt64ExW

user32

GetUpdateRgn
PostQuitMessage
CharNextExA
CharToOemA
PostThreadMessageW
ReplyMessage
DialogBoxParamA
UnionRect
DestroyIcon
SendNotifyMessageW
SetSysColors
GetKeyboardLayoutNameA
SendMessageTimeoutW
ReleaseDC

Exports

Exports

?jrh_d___mhylij_n@@YGDPA_N@Z
?KDAGnfvyswSD@@YGPAIE@Z
?_tuhzJXngrK_A_@@YGDNG@Z
?_yatkjoo_kCH_HY@@YGDPAM@Z
?fpysbaP@@YGPAKPAEPAG@Z
?VCWM_EJCXNIP_IGF_MAN@@YGPAIF@Z
?fitof_v@@YGPAXPAID@Z
?__lWTx_x@@YGMPAK@Z
?JKNLasbwp_htQ@@YGDE@Z

Sections

.text
Size: 53KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pacdat
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42ae992b420b04a45f8cb092b5844287

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

gdi32

comdlg32

shlwapi

user32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 385KB

.data Size: 31KB - Virtual size: 31KB

.rdata Size: 30KB - Virtual size: 30KB

.idat Size: 16KB - Virtual size: 15KB

.pacdat Size: 16KB - Virtual size: 15KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 53KB - Virtual size: 385KB

.data
Size: 31KB - Virtual size: 31KB

.rdata
Size: 30KB - Virtual size: 30KB

.idat
Size: 16KB - Virtual size: 15KB

.pacdat
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB