89d3415833b2302df365e0e507b53476_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

89d3415833b2302df365e0e507b53476_JaffaCakes118
Size

73KB
MD5

89d3415833b2302df365e0e507b53476
SHA1

a79d163c4932bdb16870e6eeb5841e6810568c82
SHA256

815060c7292eee6bb3aa32bf0b4aff2f3e96391fb2fd34a1b3fa8565366e8bc6
SHA512

5dc433743a663306545119a6d81d11d1882fd3afe907555189d6cad154e1f6551d513ce258e2de18e31d02fe6a36b3c4b8e122122072a28e40566a37f12dca2f
SSDEEP

1536:yLWLsYlX8R5afTxAeyDbTaClBRHK2QUbkiFA:yLAhx8RWyX5/u0kuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89d3415833b2302df365e0e507b53476_JaffaCakes118

Files

89d3415833b2302df365e0e507b53476_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5cf4febbe3b2008df4ea529e61c4958c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\kyJmsNa\zOwbzqh\WyugNbm\fztyxJGl\ysaOkyuhenBfk.pdb

Imports

msvcrt

_controlfp
__set_app_type
srand
__p__fmode
atoi
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
memset
sprintf

shlwapi

UrlGetLocationA
UrlIsOpaqueW

user32

LoadMenuA
CallWindowProcA
MapVirtualKeyExW
GetNextDlgGroupItem
UnionRect
DialogBoxIndirectParamA
AttachThreadInput
OffsetRect
BeginDeferWindowPos
wsprintfW
IsCharAlphaA
GetDC
ArrangeIconicWindows
DrawFocusRect
IsIconic
EnableScrollBar
SetWindowLongW

kernel32

FormatMessageW
GlobalFindAtomW
GetModuleHandleA
FindResourceA
lstrlenA
GetModuleFileNameA
LoadResource
lstrcmpiW
VerifyVersionInfoW
MoveFileExW
LCMapStringA

Exports

Exports

?InitConfigDir@@YGHHPAUHINSTANCE__@@|U

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.$dsdir
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.icar
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ecar
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ally
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.carry
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ram
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cf4febbe3b2008df4ea529e61c4958c

Headers

File Characteristics

PDB Paths

Imports

msvcrt

shlwapi

user32

kernel32

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 62KB

.$dsdir Size: 512B - Virtual size: 106B

.icar Size: 3KB - Virtual size: 2KB

.ecar Size: 512B - Virtual size: 116B

.ally Size: 1024B - Virtual size: 627B

.carry Size: 1024B - Virtual size: 572B

.data Size: 2KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 512B

.ram Size: - Virtual size: 42KB

.text
Size: 63KB - Virtual size: 62KB

.$dsdir
Size: 512B - Virtual size: 106B

.icar
Size: 3KB - Virtual size: 2KB

.ecar
Size: 512B - Virtual size: 116B

.ally
Size: 1024B - Virtual size: 627B

.carry
Size: 1024B - Virtual size: 572B

.data
Size: 2KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 512B

.ram
Size: - Virtual size: 42KB