7782a03e0850a7150aa8c87b4c426c42_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7782a03e0850a7150aa8c87b4c426c42_JaffaCakes118
Size

130KB
MD5

7782a03e0850a7150aa8c87b4c426c42
SHA1

686a7f0c51a1aef82ce050996d901015166840b1
SHA256

e2887a765b0ce37d22daa44517c1f0bed1a1989bc434ba4eff092fe19dab4738
SHA512

7b2166cc34ac3e0155c9ec7bf821df91137e2d402291cf387664a7faa87541e771fcb81e94535fcccba049680f3e9452eed349b85a6785d6bba2b4a3f5458ea8
SSDEEP

3072:NyRX7qIp35jSBuKVHMWWZVq342dxQ3rOiLKo1UcDLYl5:NI7q+3gBuysW+I342di7LKqDLO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7782a03e0850a7150aa8c87b4c426c42_JaffaCakes118

Files

7782a03e0850a7150aa8c87b4c426c42_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5622474a0b1665d1c871eb8f563f6b17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\umrRy\ImloQ\cITTp\prApc\gGdrbdkj.pdb

Imports

user32

MonitorFromPoint
DefWindowProcA
ValidateRect
RegisterWindowMessageW
GetUpdateRect
UnionRect
ClientToScreen
CharLowerW
EnumWindows
SetWindowPos
CreateCaret
RemoveMenu

gdi32

GetStockObject
CreateSolidBrush
DeleteDC
SetLayout
CreatePalette
RectInRegion

comctl32

ImageList_GetIconSize
ImageList_Write
ImageList_GetImageCount
ImageList_LoadImageW

shlwapi

StrToIntW
UrlGetPartA
StrCpyNW

kernel32

GetSystemDirectoryA
lstrcmpA
SetErrorMode
GetCompressedFileSizeW
LoadLibraryW
SetFileApisToOEM
lstrcmpiW
CancelWaitableTimer
HeapValidate

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleW

Exports

Exports

?pgtjffiT_Mkqx__Ynhooq@@YGDIPAD@Z
?WVTC_jcwawpn__baxevdZ_@@YGGE@Z
?qUMUAFAWh@@YGFDPAI@Z
?_sWEHrkzd@@YGMM@Z
?RHYAQAQLMMsit__iogr@@YGPAX_NPAD@Z
?D__UH__NKX__BMETc_h_d@@YGJK@Z
?GYjabvALC_R_Y_PUgn__zk@@YGXPAKN@Z
?LNZWIQEy_rspzl@@YGK_N@Z
?MSGCYVFEWT@@YGPAM_NI@Z
?_S_fwzVKZOBV@@YGPADPADG@Z
?wgsc_rs_jtxn@@YGHKK@Z
?EYxwD_SDOf_aivXWs__@@YGXM@Z

Sections

.text
Size: 54KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pacdat
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5622474a0b1665d1c871eb8f563f6b17

Headers

File Characteristics

PDB Paths

Imports

user32

gdi32

comctl32

shlwapi

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 133KB

.data Size: 31KB - Virtual size: 31KB

.idat Size: 11KB - Virtual size: 10KB

.pacdat Size: 12KB - Virtual size: 11KB

.rdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 54KB - Virtual size: 133KB

.data
Size: 31KB - Virtual size: 31KB

.idat
Size: 11KB - Virtual size: 10KB

.pacdat
Size: 12KB - Virtual size: 11KB

.rdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB