94b7d75ddf74c3307283b74c8f8a28bf_JaffaCakes118

General

Target

94b7d75ddf74c3307283b74c8f8a28bf_JaffaCakes118
Size

131KB
MD5

94b7d75ddf74c3307283b74c8f8a28bf
SHA1

5e6a7447597f3925246fa747e9c11e7bc0eec535
SHA256

0d24f4aeb3d7bb6f8e393e046da05bc22042aafe43895e72d5525dba389f0a6a
SHA512

f68130dca7fb6882249fe580b3004a5cdfca79928f0512f0f4c3fecd4b9b842286c18babf0eb03f2cb70115d018a0232516812df5e66690b30c68603e57d4c3d
SSDEEP

3072:2o+tThZRJ/sIw+Lj+bd/3AYGNB14Z0aJPGU0r8:WTBLj7yZbJBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94b7d75ddf74c3307283b74c8f8a28bf_JaffaCakes118

Files

94b7d75ddf74c3307283b74c8f8a28bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

01c57fdae201e8c8030db3eb38c0fdb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\fYzUer\dkdQJQS\pHdpv.pdb

Imports

shlwapi

PathGetArgsW
StrCatBuffW

kernel32

CancelWaitableTimer
HeapValidate
GetComputerNameA
GetCommProperties
WaitForSingleObjectEx
lstrlenW
DeleteFileA
GetTimeFormatA
FileTimeToDosDateTime
GetFileSize
GetTempFileNameA
TlsSetValue

user32

GetWindowRect
wsprintfW
RegisterHotKey
GetMenuInfo
GetScrollRange
AppendMenuA
FindWindowW
CreateDialogParamA
CreateDialogParamW
GetScrollPos
GetNextDlgTabItem
SetScrollPos
CreatePopupMenu
SystemParametersInfoW

gdi32

CreateHatchBrush
Polyline
SetDIBColorTable
SetDIBitsToDevice
RectInRegion
SaveDC
GetTextExtentExPointW

Exports

Exports

?kHtBeCwNtnvVrtjUY@@YGXM@Z
?wsknxFelTawYxxgmwvpev@@YGXK@Z
?fvslouThbzzbVapUivzuu@@YGDJJ@Z
?fbFldqisqto@@YGXK@Z
?jktpilBtr@@YGPAFJPAD@Z
?amjxxyLUbBglfunZYsqffJ@@YGPAFKG@Z
?PNvqiwdjiyerddUxdX@@YGPAEI@Z

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dbg
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01c57fdae201e8c8030db3eb38c0fdb5

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.dbg Size: 512B - Virtual size: 512B

.data Size: 5KB - Virtual size: 89KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 22KB - Virtual size: 21KB

.dbg
Size: 512B - Virtual size: 512B

.data
Size: 5KB - Virtual size: 89KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 2KB - Virtual size: 2KB