712bd4cb0bf1e1b2d22def4b337b0f5a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

712bd4cb0bf1e1b2d22def4b337b0f5a_JaffaCakes118
Size

115KB
MD5

712bd4cb0bf1e1b2d22def4b337b0f5a
SHA1

8465ad19f7c99d26368b36631e4148c3419added
SHA256

a68a52cd2cd9ffe0792690aac1098d515fe806833857d60fb29621b2b5040179
SHA512

eceabc60297adabea8e4e48d7f974a99631488b330dbd8c8020350664d3985cd801de37adca74a7149ca605e2d22c919043107809c486dd876f8d69053fde89f
SSDEEP

3072:xNFm9nbyKnerhkDzeP6IpGd1n/7KKTTFS:t6nbyKeVkPeP6nKKlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
712bd4cb0bf1e1b2d22def4b337b0f5a_JaffaCakes118

Files

712bd4cb0bf1e1b2d22def4b337b0f5a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a416d7f4e72b7531079028e162d127cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

A:\dlexo\GeWhfjBG\rSft\wsus\tlraip.pdb

Imports

gdi32

CreateCompatibleBitmap
GetObjectA
SetDIBColorTable
EndPath
SetAbortProc
GetSystemPaletteEntries
RectInRegion

user32

SetClassLongW
SetLastErrorEx
ShowScrollBar
PostMessageA
ModifyMenuW
IsDialogMessageW
SetPropW
SetRect
AppendMenuA
GetPropW
GetWindowLongW
IsCharUpperA

shlwapi

StrCmpNW

comctl32

ImageList_ReplaceIcon
CreatePropertySheetPageW
InitCommonControlsEx
DestroyPropertySheetPage

kernel32

LoadLibraryW
WinExec
VirtualFree
GetFileType
QueryDosDeviceW
VerifyVersionInfoW
DeviceIoControl
LoadLibraryA
FindFirstChangeNotificationW
lstrlenW
GetProcAddress
lstrcmpiW

Exports

Exports

?nyGHShMleM@@YGXG@Z
?kqdNijQexvvRUw@@YGEF@Z
?FFioUqnhw@@YGFF@Z
?uugLaxiubkuedozu@@YGXPAKJ@Z

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a416d7f4e72b7531079028e162d127cc

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

shlwapi

comctl32

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.idata Size: 1024B - Virtual size: 1002B

.edata Size: 512B - Virtual size: 189B

.temp Size: 77KB - Virtual size: 77KB

.data Size: 5KB - Virtual size: 17KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 19KB

.idata
Size: 1024B - Virtual size: 1002B

.edata
Size: 512B - Virtual size: 189B

.temp
Size: 77KB - Virtual size: 77KB

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 2KB