8e96094284d9464b977e9f80c3b6387a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8e96094284d9464b977e9f80c3b6387a_JaffaCakes118
Size

150KB
MD5

8e96094284d9464b977e9f80c3b6387a
SHA1

d005a3b86092d35d257cc80a7ac402afa75a0c1b
SHA256

48b03c89100dea7f889e7f207ecc5c8c2424111a791af993149337d1f45b39c0
SHA512

a46728529e1438e204f0782d573675a7c693810b01ddc45889eb0d07f101133e198074d887c215108f0cdc2fc7d9c8ce784559ee90f92b2820a9ad352c781111
SSDEEP

3072:vH8J8M96c2Z+GariqjkkxemFT4y4GOUM5KIWUvuQYcbBOOoB/8Bpy:vHQ8MD25ar8cFPMB90bSBI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e96094284d9464b977e9f80c3b6387a_JaffaCakes118

Files

8e96094284d9464b977e9f80c3b6387a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

821e1d17f70af1f412351f1dcca42045

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\eofvgin\cHfB\yjYgs.pdb

Imports

comdlg32

PrintDlgExW
ChooseColorW
GetOpenFileNameW

user32

MonitorFromRect
ShowCursor
RegisterClassA
AdjustWindowRect
SendNotifyMessageW
InSendMessageEx
InsertMenuW
CreateIconFromResource
SetSysColors
SetCaretPos
CharLowerW
LoadStringA
ClipCursor
TileWindows
CreateDialogParamA
GetMenuItemRect
GetScrollPos
SetDlgItemInt
EnableWindow
InsertMenuItemW
ScreenToClient
LoadBitmapA
EnumWindows
GetDlgItemTextA
GetDC
LoadIconA
ReplyMessage
PostThreadMessageW
AttachThreadInput
RegisterWindowMessageA

kernel32

GetExitCodeThread
LoadResource
RegisterWaitForSingleObject
CreateThread
IsValidLanguageGroup
GetModuleFileNameA
GetAtomNameW
ReleaseSemaphore
CompareFileTime
GetLocaleInfoA
GetProcAddress
VerSetConditionMask
GetThreadLocale
SetUnhandledExceptionFilter
lstrcmpA
FindResourceW

gdi32

GetTextExtentPoint32W
ScaleViewportExtEx
StretchBlt
GetSystemPaletteUse
RestoreDC
CreateHalftonePalette
LineTo
SelectObject
StartPage
GetTextExtentExPointW
GetTextColor
ExcludeClipRect
CreateRectRgnIndirect

Exports

Exports

?wcsstr@@YGKPA_WG@Z

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

821e1d17f70af1f412351f1dcca42045

Headers

File Characteristics

PDB Paths

Imports

comdlg32

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 21KB - Virtual size: 21KB

.mdata Size: 11KB - Virtual size: 10KB

.data Size: 24KB - Virtual size: 131KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 21KB - Virtual size: 21KB

.mdata
Size: 11KB - Virtual size: 10KB

.data
Size: 24KB - Virtual size: 131KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB