939989e0520cf9bc2639804963f27adf_JaffaCakes118

General

Target

939989e0520cf9bc2639804963f27adf_JaffaCakes118
Size

110KB
MD5

939989e0520cf9bc2639804963f27adf
SHA1

60eed0f8e1059ff03ed45ec5b60c3e6f9e1106a6
SHA256

61dec962f87e3964e0b126acb6de091f67d192244a513e0bb73dfddaf6450ae0
SHA512

19fc3564ebe44710820e227cfddccfd303757bc45a3b4b2f1c778e2329c83cb64eb10dc04edc0aa762c92b3cfc052cdb1449544c888630d7b7a554e699c08119
SSDEEP

3072:oncebJXVMIwBaDj0fos+uRmAgFFQ1PXHQf:otbJVMIwBaDj0fd+Mp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
939989e0520cf9bc2639804963f27adf_JaffaCakes118

Files

939989e0520cf9bc2639804963f27adf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b0f669ac343c773e493151e7db08a2d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\giqp\xaynYyUj\xpoqj\fxmao\yoPJiWzf.pdb

Imports

user32

LoadCursorW
DrawIcon
EndDialog
GetCaretPos
GetKeyState
SetCursor
LoadMenuA
wsprintfA
ScrollWindow
DefFrameProcW
OffsetRect
EqualRect
CreateMenu
WindowFromDC

kernel32

lstrlenW
SetCommBreak
GetModuleHandleW
GetSystemDirectoryA
lstrcmpW
SetNamedPipeHandleState
GetUserDefaultLangID
OpenEventW
GetProcAddress
HeapDestroy
FormatMessageW
GetTickCount
EnumResourceTypesA

gdi32

DeleteObject
PatBlt
RectInRegion
CreateHalftonePalette
CreateSolidBrush
SetBitmapDimensionEx
GetTextExtentPointW
CreateBitmap

Exports

Exports

?nQRLPJbq@@YGPAEIPAK@Z
?aiffvmdgwsMuzvotTvHrd@@YGPAKH@Z
?pxTFcYWjjYqDxcvNgODec@@YGXIE@Z
?xDkvhyuFVhCxgLzlpbDPfc@@YGPAMPANJ@Z
?EeAmdQdnpMaxwpd@@YGEG@Z
?WpMzcfsarAlu@@YGFPAIPAD@Z

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0f669ac343c773e493151e7db08a2d6

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 5KB - Virtual size: 13KB

.crt Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 294B

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 13KB

.crt
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 294B

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 2KB - Virtual size: 1KB