a359f0fe3f244f0e3b6c74e19d5e0ec2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a359f0fe3f244f0e3b6c74e19d5e0ec2_JaffaCakes118
Size

483KB
MD5

a359f0fe3f244f0e3b6c74e19d5e0ec2
SHA1

04249a8e2bde576d11d02b1e109f791834c0797c
SHA256

211d5ce9f1b99678926f764347e82f4573ecddef0f7eda9e5190a011a5096ef6
SHA512

e7d5a506ed165c445ad210220da883188b4b0266e8be7d624e5ab6394f6a6a56674029b672abd02d62c4f1a818668e2a80e9cadcf3256a02a6273de46fae98d9
SSDEEP

3072:G0z3A/Mh57BIqaQFgQoNHJdkGdBLNl58fVLo63R8Dk/93Y5LHzSJvz5IINZ2If3Y:SMh5tDD4cG/GVPODuCzSYIbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a359f0fe3f244f0e3b6c74e19d5e0ec2_JaffaCakes118

Files

a359f0fe3f244f0e3b6c74e19d5e0ec2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

775dec764c4d4b8fb21740e33c7f6f23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

FindTextA
GetSaveFileNameA
GetFileTitleA
ChooseColorA

comctl32

ImageList_Destroy
ImageList_GetBkColor
ImageList_Add

kernel32

LoadLibraryA
VirtualAllocEx
GetStartupInfoA
GetThreadLocale
GetModuleHandleA
GetProcessHeap
ExitProcess

user32

GetSysColorBrush
GetWindowTextLengthA
SetScrollInfo
SetScrollRange
CharLowerA
SetTimer
GetWindowDC
GetMenu

Exports

Exports

_yH6uvdIB
HHRWvlLoZmcCRO@16
_h3P4A@16
pNxS1
_jcVeeHDtLg
FVu3q8hBAY@24
MnsLQ_GK7oFtL@16
EEDtX@20
_daA3vVVm@12
_qaB1r
_uipDOLKPPfba59@12
Oxn9vkJJC6D0@20
rHSs1uvo5fD8
_kuz2s@20
F3_mLqq
_MnoglFM3T@4
_uB8mV8LPQJzAU@4
_T6D7cn0l2
_YgnUnJUnn1@16
_TYv_q@12
qTdgpZa
_fjvW7rWXHA@8
_zu17M81K4T4lk
_vWAUpXimV
_vMAMEHlY
snmGCX5
LQB_MyJYq8QFS
_yLna8g@24
s36r3o_aO5oL@12
U7jxdpR
_kyZAJpcp0H0yU@24
_0eA0hGh5QHinF
_wD0HYEEO7dVQZm@8
_TsLJyGjJZ@20
_UvQk1pTLgkz@16
_KxkdEF4@16
_qTF6_ektvY3n15@16
_T4EsdIkO
_MIyizOAyptUeZ@24
ksWYhvCwy1Hq3
mqTDS
GwmxfS
wIMlCZJj
_NggOLNOn
_8b_gulQp41x@12
443stJ@16
_vQOqnDlrv@20
fgDx3@4
_rUMaZEr

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

775dec764c4d4b8fb21740e33c7f6f23

Headers

File Characteristics

Imports

comdlg32

comctl32

kernel32

user32

Exports

Exports

Sections

CODE Size: 10KB - Virtual size: 10KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 442KB - Virtual size: 442KB

.idata Size: 1024B - Virtual size: 724B

.thdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 10KB - Virtual size: 10KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 442KB - Virtual size: 442KB

.idata
Size: 1024B - Virtual size: 724B

.thdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB