7845e2fb67ebc8e51227a9b5aa65099a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7845e2fb67ebc8e51227a9b5aa65099a_JaffaCakes118
Size

119KB
MD5

7845e2fb67ebc8e51227a9b5aa65099a
SHA1

b37c665b0460cd7374523b47db3c4fc0f4a7f17e
SHA256

befdd09aec133ce9e8279869ff9217bc0e33e2877e6417713b26c6f9cef2ba98
SHA512

27187b28908a647d6926657fa377e0808e9fbc282932431bc5d49d6245a90ad0255a50158fa4b38b507cb768a4f782bbf4e2f5975ee78f490930f8c9ea64c80c
SSDEEP

3072:vQYeuGeAYzMCAy/gTcNGY8rnapAVRZrOIWBJ+pEwOE2yO:23eA89AyKcN98rnqA9b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7845e2fb67ebc8e51227a9b5aa65099a_JaffaCakes118

Files

7845e2fb67ebc8e51227a9b5aa65099a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

36676d48fdb9f8dd83269c70f70d5104

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\lXQMHz\imhddzXn\pZugyogk\hyekpol.pdb

Imports

gdi32

GetStockObject
ScaleViewportExtEx
GetSystemPaletteUse
SetBrushOrgEx
GetTextMetricsA

user32

GetNextDlgTabItem
SetScrollInfo
InsertMenuA
GetCursorPos
SetTimer
EqualRect
SetWindowRgn
wsprintfA
GetUpdateRgn
TrackPopupMenuEx
InvalidateRgn
OpenInputDesktop
GetKeyboardLayout

shlwapi

ChrCmpIA
UrlGetPartA

kernel32

GetTickCount
GetComputerNameExW
HeapFree
GetWindowsDirectoryA
MoveFileExW
lstrcmpA
lstrcpyA
GetLocalTime

Exports

Exports

?_wusscmrsd@@YGMPAMG@Z
?pk__ax___wKGRNVYZP__TH@@YGNPANK@Z
?_m_QOFBTS__H__ZikV@@YGDJM@Z
?lvp_k__@@YGPAIG@Z
?Y_rjtz_r__@@YGPAIGI@Z
?k_TYBM_oqN_SLJWYOGR@@YGGHD@Z
?VHGYMKHTVNBhtO@@YGDI@Z
?mcjg_Q_QYECB@@YGKPAD@Z
?t_xthd_JRV_XNB__Q@@YGPAIPAG@Z
?GM__BUUrA_DTOH_m_@@YGPAKH@Z
?_jcaxkhehmjYAY_FN@@YGJ_NK@Z
?BFWDYWEWTLsf__@@YGGJG@Z
?nbiijuxtoabTEM@@YGPAHJF@Z
?YN_HSW_AS_UAXEGTO@@YGGDPAM@Z
?SSDB__V_ihYERE@@YGKDPAM@Z
?JBNJ_FV___UF@@YGPAEG@Z
?LTCRU_ce@@YGXJ@Z
?cja_LARPRSRNPIkqWM@@YGXGF@Z

Sections

.text
Size: 48KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pacdat
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36676d48fdb9f8dd83269c70f70d5104

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 168KB

.data Size: 18KB - Virtual size: 17KB

.idat Size: 10KB - Virtual size: 10KB

.rdata Size: 23KB - Virtual size: 23KB

.pacdat Size: 12KB - Virtual size: 12KB

.rsrc Size: 3KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 168KB

.data
Size: 18KB - Virtual size: 17KB

.idat
Size: 10KB - Virtual size: 10KB

.rdata
Size: 23KB - Virtual size: 23KB

.pacdat
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 3KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB