aba611de24ba651f10cff829f311ff3b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aba611de24ba651f10cff829f311ff3b_JaffaCakes118
Size

109KB
MD5

aba611de24ba651f10cff829f311ff3b
SHA1

b14d9d595cfbf3fbcdde3a58af33dcc62d11ef69
SHA256

0e2becaad39d2e6066f6e74ab76cc460e03685d346db86e19ead3800882d3428
SHA512

886c79aa9c5062447865fc9b7a89284162be95a97fd1b156ff71d700121f56d6f941965861da6653e2a9c1caa9adb917e8078b872d37d23f9e2cf976504c4ccd
SSDEEP

3072:1hnKqbgCm4XS/eAdVXA0VFQeCKPk2yHWcg8nJtT:1FbgiXSJdV3VFmZg8JF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba611de24ba651f10cff829f311ff3b_JaffaCakes118

Files

aba611de24ba651f10cff829f311ff3b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bfc83bca643da00a16536dbdcda03bdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\eJzY\Gpbi\SevNwaj\mLdadaa\OyxNk.pdb

Imports

kernel32

DuplicateHandle
IsBadWritePtr
LoadLibraryW
lstrcmpiW
GetProcAddress
GetLocaleInfoW
ConnectNamedPipe
RegisterWaitForSingleObject
AddAtomA
GlobalGetAtomNameA
SetFileAttributesA
lstrlenA

gdi32

GetTextMetricsW
Escape
GetCurrentObject
ExtTextOutA
RectVisible
SetDIBits
PtVisible
SetViewportExtEx
SetBkColor

shlwapi

StrCmpNA

user32

ShowScrollBar
OpenDesktopW
GetMenuItemID
DialogBoxParamA
GetKeyNameTextW
CheckDlgButton
CharToOemBuffA
GetWindowTextLengthW
GetWindowLongW
ShowWindowAsync
GetPropW
GetMessageExtraInfo
GetMenu
GetForegroundWindow

Exports

Exports

?nKBEoTkdRjMUbDeeurMlyY@@YGPANPAKPA_N@Z
?CpZyouuqpAScqwiyz@@YGPAKKPAH@Z
?XPqKRtsehjxsTxEwDnfCjc@@YG_NPAKH@Z

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfc83bca643da00a16536dbdcda03bdd

Headers

File Characteristics

PDB Paths

Imports

kernel32

gdi32

shlwapi

user32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.idata Size: 1024B - Virtual size: 950B

.edata Size: 512B - Virtual size: 195B

.temp Size: 72KB - Virtual size: 72KB

.data Size: 5KB - Virtual size: 13KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.idata
Size: 1024B - Virtual size: 950B

.edata
Size: 512B - Virtual size: 195B

.temp
Size: 72KB - Virtual size: 72KB

.data
Size: 5KB - Virtual size: 13KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 2KB