8655a04b05c16846cb05c4e31b53a051_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8655a04b05c16846cb05c4e31b53a051_JaffaCakes118
Size

86KB
MD5

8655a04b05c16846cb05c4e31b53a051
SHA1

2e7627a0a6f8e313a0f5bda33555e23964a327da
SHA256

45c907d7a8d0da62777a293d621d8dc45d8d3ca10285ab07de9e6af79270fef4
SHA512

9f206ea79bbc678bd05f3c4bc29e0b07fedede2c5944ec1ffe15d6cc90df508f38b2cb00c70446921b6496b596501b49f8658fb2b585436dc8d72e83949eb0fb
SSDEEP

1536:FIgzQzoCBlKtRNOoALhaA2zr2VyucHV3f+zylLcUWhMkrw7Seu6/vSDTyBKgyX:WdV8tRNDYFErencNhc5OkrBeu6nWTyLy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8655a04b05c16846cb05c4e31b53a051_JaffaCakes118

Files

8655a04b05c16846cb05c4e31b53a051_JaffaCakes118
.exe windows:5 windows x86 arch:x86

84164121d4e4c24e5df0fa7adaacb3c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\upjK\wLpcbNfveAzn4\QnhypaE\fORfhCe.ugb

Imports

shlwapi

ChrCmpIW
ord158
PathMakePrettyW
StrCpyNW
StrCatW
StrStrA
PathCompactPathExA
StrCmpNIW
PathFindNextComponentW

kernel32

CancelWaitableTimer
OpenSemaphoreA
lstrcmpiA
SetMailslotInfo
CreateHardLinkA
GetSystemTimeAdjustment
GetModuleHandleA
SetupComm
GetCommModemStatus
SetInformationJobObject
GlobalCompact
SetMessageWaitingIndicator
IsBadWritePtr
SetTapePosition
LoadLibraryA
GetModuleHandleExA
LoadLibraryExW

user32

CopyImage
PostMessageW
InvalidateRgn
GetClipboardOwner
CreateCursor
DrawIcon
GetClientRect
GetWindowTextLengthA
SetWinEventHook
SetRect
EnableMenuItem
SystemParametersInfoA
MapWindowPoints
GetDialogBaseUnits

gdi32

CreateFontIndirectW
GetDIBits
GetRgnBox
CreatePatternBrush
GetTextCharset
CreateEnhMetaFileW
GetEnhMetaFileBits
SetBkColor
SetArcDirection
PlayEnhMetaFileRecord
SetViewportExtEx

msvcrt

memset

Exports

Exports

?_ChildWindowFromPoint@@YGKPAD0@Z
?_ChildWindowFromPointEx@@YGKPAD0PAG@Z
?_WindowFromPhysicalPoint@@YGPAXPAKPAEPAI@Z

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.m_data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CData
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NData
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84164121d4e4c24e5df0fa7adaacb3c5

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.icode Size: 1024B - Virtual size: 643B

.m_data Size: 2KB - Virtual size: 2KB

CData Size: 512B - Virtual size: 176B

NData Size: 1024B - Virtual size: 532B

.rsrc Size: 69KB - Virtual size: 68KB

.reloc Size: 1024B - Virtual size: 766B

.text
Size: 10KB - Virtual size: 10KB

.icode
Size: 1024B - Virtual size: 643B

.m_data
Size: 2KB - Virtual size: 2KB

CData
Size: 512B - Virtual size: 176B

NData
Size: 1024B - Virtual size: 532B

.rsrc
Size: 69KB - Virtual size: 68KB

.reloc
Size: 1024B - Virtual size: 766B