88cac774f1b3c593858a61603445190e_JaffaCakes118

General

Target

88cac774f1b3c593858a61603445190e_JaffaCakes118
Size

183KB
MD5

88cac774f1b3c593858a61603445190e
SHA1

dfaa8ca5c41afb5adf3e4b384da0e4b45600371c
SHA256

a304acf87149db63f3224497073354b364403b8a6213f1ea3b67de9622e6f1e5
SHA512

407fb416fd1748f1014091984bc012580f76a051ae6b4afbb4fabb41b11b3e3439f26718795c5bd059ed57c6eadd5969e870966942fcf394882cc0057f77ea08
SSDEEP

3072:Y7iaEkThLogy6hT42ixKXXa+3EulEa1bovujwbv4dPVOa4k:Y7/EkThM0ViQXaSEHa1UujwYPVX4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88cac774f1b3c593858a61603445190e_JaffaCakes118

Files

88cac774f1b3c593858a61603445190e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5d87a7b9bb6969e343fa62313de161a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\dkxXw\fbnLi\sBsahis.pdb

Imports

user32

MapWindowPoints
LoadBitmapA
wvsprintfW
SendMessageA
AppendMenuA
GetScrollRange
LoadCursorW
ShowCursor
WindowFromDC
DialogBoxParamA
DestroyAcceleratorTable
DefDlgProcW
SetForegroundWindow
HiliteMenuItem

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
PropertySheetW

kernel32

lstrcmpW
SetCommBreak
RemoveDirectoryA
GetCurrentThread
GetTickCount
VirtualQuery
GetOverlappedResult
EnumResourceNamesA
lstrlenW
GetVersionExW
GlobalMemoryStatusEx
GetModuleHandleW
AddAtomA
GetProcAddress
CompareStringA

gdi32

EnumFontFamiliesW
SetLayout
TranslateCharsetInfo
RectVisible
SetBkColor
RemoveFontResourceW
GetBitmapBits
GetTextExtentPoint32W

Exports

Exports

?oAvqctt@@YGPAJDI@Z
?VAjbzuBnTx@@YGMKPAK@Z
?SYgsJQmykofcHcTauBdjr@@YGPA_NNJ@Z
?hZDrvgoEe@@YGXI@Z
?aocNvPzgphczr@@YGPAHPAK@Z

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 231B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d87a7b9bb6969e343fa62313de161a6

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 26KB

.data Size: 143KB - Virtual size: 143KB

.crt Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 231B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 26KB - Virtual size: 26KB

.data
Size: 143KB - Virtual size: 143KB

.crt
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 231B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 3KB