8ef47618f93b9b30d35cadcafbf1914b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8ef47618f93b9b30d35cadcafbf1914b_JaffaCakes118
Size

160KB
MD5

8ef47618f93b9b30d35cadcafbf1914b
SHA1

aa69e11347df63ba8cdf94752531cd66edf98ca6
SHA256

c0a226e832a5dee87e9672d1960d6e2efcaa7d0abbd4da7c4ebf28f2c0e712bd
SHA512

15154f7b76acb257d13cdfab5e230edebecff654fc92bd93ca7a3c4b5ea2edfa974e803e647a804ef6d99285533e4e34d98e8ae53a09bd48878e60d0598da46e
SSDEEP

3072:rr78XUEX26AEh24pxZFWs5DBjh0LK+mELAbSJ56F6jACObA6o:rxsjQ4pDFtDBjhkfAo8F6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ef47618f93b9b30d35cadcafbf1914b_JaffaCakes118

Files

8ef47618f93b9b30d35cadcafbf1914b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5bcf43cea2693c569ec644d3aa76ceae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\Cmqahm\MiHn\mdeclu\wmpbeM\OJid.pdb

Imports

user32

IsCharUpperA
GetKeyboardLayoutNameA
GetFocus
GrayStringW
OemToCharA
DefWindowProcW
SendDlgItemMessageA
IsDialogMessageA
IsWindowEnabled
GetMenuState
SetWindowLongA
CharPrevW
SendMessageTimeoutW

gdi32

SetWindowExtEx
CreateBitmap
SetViewportOrgEx
PtInRegion
CreateICW

comctl32

ImageList_GetImageCount
PropertySheetW

kernel32

GetCurrentProcessId
LoadLibraryW
ExitProcess
GetTickCount
GetWindowsDirectoryW
SetSystemTime
CreateSemaphoreW
GetConsoleWindow
ExitThread
LocalSize
GetModuleHandleA
GlobalFree

comdlg32

PrintDlgW
GetOpenFileNameW
GetFileTitleW
PrintDlgExW

shlwapi

StrToInt64ExW

Exports

Exports

?djk_yoMTBody_m@@YGXPAEI@Z
?BBUZ_Pszv@@YGEDPAE@Z
?mk_ovGLdts_swfl@@YGPAHM@Z
?_hhusvf@@YGPAGPAHH@Z
?wodrx_gPPX__SKdhb@@YGPAXPAK@Z
?KAXFPHJ_KWPyks__rac_vA@@YGXGPAJ@Z
?_REGdl_e@@YGKPAFPAF@Z
?LUS_BLCQTVK_PQ_K@@YGDIE@Z
?_U_W_q_pfg@@YGPAXK@Z
?_wl_vmmukTZ_E_ezaF_OY@@YGJI@Z
?wexmSJB_JRGM_Asg_tUFK@@YGIPAH@Z
?j_FH_WU@@YGXPAN@Z
?__ga_rxoox@@YGFFPAG@Z
?fwd__dTMTQI_PDJseB@@YGIFPAJ@Z
?QQ_NC__V_bb_mc@@YGXD@Z

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.image
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bcf43cea2693c569ec644d3aa76ceae

Headers

File Characteristics

PDB Paths

Imports

user32

gdi32

comctl32

kernel32

comdlg32

shlwapi

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 53KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 31KB - Virtual size: 31KB

.rdata Size: 30KB - Virtual size: 361KB

.pdata Size: 16KB - Virtual size: 15KB

.image Size: 16KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 12KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 53KB - Virtual size: 53KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 31KB - Virtual size: 31KB

.rdata
Size: 30KB - Virtual size: 361KB

.pdata
Size: 16KB - Virtual size: 15KB

.image
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 12KB

.reloc
Size: 2KB - Virtual size: 1KB