8c3e9983e07c869ded39f4c88000e802_JaffaCakes118

General

Target

8c3e9983e07c869ded39f4c88000e802_JaffaCakes118
Size

168KB
MD5

8c3e9983e07c869ded39f4c88000e802
SHA1

b483f52af28a9e3bb273ca0bbd48802ed3e363be
SHA256

d56649737db0ea548d3bf05ac1ee173360a4bd464f5d9456de8c975426614bc0
SHA512

365a01f7d03b5ac3e15753de2d11aaedd1e24f3c58fae68cb096dee2480c55598cd83a73789023593f7359be2863ce7a427d40508bae24b2c64669819c73fe71
SSDEEP

3072:k1IM6ptoGzKtuNMSL1KyY6cDcw6IKPhjoXfhFYex1j2UuZiVeqUL4vlX5h3sqm:wITtzc8xt1PmXfrbl2dqUMvl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3e9983e07c869ded39f4c88000e802_JaffaCakes118

Files

8c3e9983e07c869ded39f4c88000e802_JaffaCakes118
.dll windows:4 windows x86 arch:x86

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Write
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_Remove
ImageList_Draw

gdi32

GetDIBColorTable
CreateDIBitmap

user32

GetCursor
OpenIcon
GetClientRect
GetClipboardData
GetCursorPos
GetMenu
DrawMenuBar
GetDC

kernel32

VirtualAlloc
ReadFile
GetModuleHandleA
LoadLibraryA
SetEndOfFile
GetLastError
ResetEvent
ExitProcess

Exports

Exports

UYS3Zdz67@24
BwEO5d
_oiPxl37Yg@16
_07aJGH@8
_cTzcbZDl
cihl3DJrW1Ge
_fw3qEh3A
_RUJ5N
LsERixT58no8Y
_6ZOTxx2u0x
_cT90GypzD3W@24
_clEQfN6ibVY8U
_IqhP3CPp@16
124EIM@20
DHjC2tq@8
_Zo9wLjajXExH9
05TUiBVj
_SWA6DoceDk@24
DUvhlIWEgxJpJS@4
OEjcY98GT@8
_tXRTxmXrGnsbc@20
t_GKzV1qXOQQxm
s702xPvTqJMAfn@8
8LDtqD
_UjMcbLXsOQP@20
jMuCr7v7@16

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

Imports

comctl32

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 182KB

.data Size: 148KB - Virtual size: 148KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 182KB

.data
Size: 148KB - Virtual size: 148KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB