86cdc7d2262d8cc4d170a4edbb9388ef_JaffaCakes118

General

Target

86cdc7d2262d8cc4d170a4edbb9388ef_JaffaCakes118
Size

115KB
MD5

86cdc7d2262d8cc4d170a4edbb9388ef
SHA1

7567d3114a72a4fca02ed49d69e6ea7ede88ba5b
SHA256

ca0a0f398df76337de595aa84b2529b1e338b230b7c715282c14f05cc6bc3ffd
SHA512

1223d1f22afea961012e8e6864a758f7d9df3a3c9d2a28e7b5495f28146282f721864d468c4ee41f474d66d491452a01bdf4b01f823d5764602e59358e16beeb
SSDEEP

1536:wzRxy5Olyq/QjLXard90/A2TtlVLJix72OO74i0b+dEPrVYoMOTwIJAgoG/L4UlN:YxFHJ92A2ROW30NDqon3o8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86cdc7d2262d8cc4d170a4edbb9388ef_JaffaCakes118

Files

86cdc7d2262d8cc4d170a4edbb9388ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dfd2ba85f73c246b0832e9f5a6520d18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Y:\Ixmdwpot\ygvcnrkT\lkqyKS.pdb

Imports

ntdll

_aullrem

gdi32

BitBlt
EndPage
CreateFontIndirectA
SetDIBitsToDevice
GetTextExtentPointW
SetPixel
TextOutA
CreateBrushIndirect

user32

SetMenuItemBitmaps
GetMonitorInfoW
SetWindowPlacement
CharToOemA
LoadIconW
SetActiveWindow
OpenInputDesktop
DispatchMessageW
GetMenuStringW
GetWindow
DrawIconEx
IsDlgButtonChecked
GetScrollPos
OpenIcon

kernel32

GlobalAlloc
GetProcAddress
lstrlenW
FormatMessageA
CreateNamedPipeW
CompareStringW
lstrcmpiA
GetCommTimeouts
GetModuleFileNameA
GetFileSize
TlsGetValue
GetCommConfig
GlobalMemoryStatus
GetModuleHandleW

Exports

Exports

?skAmpvc@@YGMPAFG@Z
?vfoydBsxfxkrbWKhpjt@@YGIJD@Z
?zdZuieygpl@@YGPAKF@Z
?rfsceMisx@@YGGFH@Z
?MAcoabjNmhl@@YGPANEH@Z
?ttrowowtxbi@@YGJEPAD@Z

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dfd2ba85f73c246b0832e9f5a6520d18

Headers

File Characteristics

PDB Paths

Imports

ntdll

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 76KB - Virtual size: 76KB

.edata Size: 1KB - Virtual size: 1KB

.crt Size: 3KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 76KB - Virtual size: 76KB

.edata
Size: 1KB - Virtual size: 1KB

.crt
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 3KB