a6b61916f5ae9cd95d9257849abc7ac7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a6b61916f5ae9cd95d9257849abc7ac7_JaffaCakes118
Size

86KB
MD5

a6b61916f5ae9cd95d9257849abc7ac7
SHA1

9a337fcfa0eb9f0a395b26715b0012469a75cdfb
SHA256

90c6c0b691d0550a8e1dd312d27568c460131ac33cb7ccd0e77bb3d5db936253
SHA512

a2c30edeb62da1d8f2beeb37d141513bff953dd885a1040a4050c3a2d1238f35c8e0b2633744fc0514ba34e89385da4bca9bd3da0b67f511e2af1da62806ddd9
SSDEEP

1536:8IgzQzoCPlUtRNOoALhaAZzr2VyucHVAf+zylLcUWhMkJw7Seu6/vSDTyBKgkO:dd7qtRNDYFBrencmhc5OkJBeu6nWTyLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6b61916f5ae9cd95d9257849abc7ac7_JaffaCakes118

Files

a6b61916f5ae9cd95d9257849abc7ac7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

84164121d4e4c24e5df0fa7adaacb3c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\bwyK\AyJuGkyPzecE4\lzylwzE\cDiaxCe.nKb

Imports

shlwapi

ChrCmpIW
ord158
PathMakePrettyW
StrCpyNW
StrCatW
StrStrA
PathCompactPathExA
StrCmpNIW
PathFindNextComponentW

kernel32

CancelWaitableTimer
OpenSemaphoreA
lstrcmpiA
SetMailslotInfo
CreateHardLinkA
GetSystemTimeAdjustment
GetModuleHandleA
SetupComm
GetCommModemStatus
SetInformationJobObject
GlobalCompact
SetMessageWaitingIndicator
IsBadWritePtr
SetTapePosition
LoadLibraryA
GetModuleHandleExA
LoadLibraryExW

user32

CopyImage
PostMessageW
InvalidateRgn
GetClipboardOwner
CreateCursor
DrawIcon
GetClientRect
GetWindowTextLengthA
SetWinEventHook
SetRect
EnableMenuItem
SystemParametersInfoA
MapWindowPoints
GetDialogBaseUnits

gdi32

CreateFontIndirectW
GetDIBits
GetRgnBox
CreatePatternBrush
GetTextCharset
CreateEnhMetaFileW
GetEnhMetaFileBits
SetBkColor
SetArcDirection
PlayEnhMetaFileRecord
SetViewportExtEx

msvcrt

memset

Exports

Exports

?_ChildWindowFromPoint@@YGKPAD0@Z
?_ChildWindowFromPointEx@@YGKPAD0PAG@Z
?_WindowFromPhysicalPoint@@YGPAXPAKPAEPAI@Z

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.m_data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CData
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NData
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84164121d4e4c24e5df0fa7adaacb3c5

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.icode Size: 1024B - Virtual size: 643B

.m_data Size: 2KB - Virtual size: 2KB

CData Size: 512B - Virtual size: 176B

NData Size: 1024B - Virtual size: 532B

.rsrc Size: 69KB - Virtual size: 68KB

.reloc Size: 1024B - Virtual size: 766B

.text
Size: 10KB - Virtual size: 10KB

.icode
Size: 1024B - Virtual size: 643B

.m_data
Size: 2KB - Virtual size: 2KB

CData
Size: 512B - Virtual size: 176B

NData
Size: 1024B - Virtual size: 532B

.rsrc
Size: 69KB - Virtual size: 68KB

.reloc
Size: 1024B - Virtual size: 766B