b085a78e246903b1ed0e73ab0722bc70_JaffaCakes118

General

Target

b085a78e246903b1ed0e73ab0722bc70_JaffaCakes118
Size

167KB
MD5

b085a78e246903b1ed0e73ab0722bc70
SHA1

78f9e1986c1f71ec419ae367d8f8e6f7f8f0ec3d
SHA256

5913ccecf061ac6377e52f4f551288afe2d4fc4d6d871116b4d66a5a036d7e72
SHA512

2bbf75c81ba8d660dbb70a4560b26d26d4a5102a858d9e9dcf7d214ef05be3d35cfc816e4176a440c04a667d59078bf35b798280a58fd9822f76a9deed702c0c
SSDEEP

3072:f5vybyiLLEX/4CeUi3AZHFpnLW2MCb9S2FhT2tx0mZQxoOys:f5c5CuQhFJLW8Y0hT2t+mZpOys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b085a78e246903b1ed0e73ab0722bc70_JaffaCakes118

Files

b085a78e246903b1ed0e73ab0722bc70_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6525c8dfafdeda65f48d36a1ddb08229

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\xspGN\hgnq\vbVnxa.pdb

Imports

kernel32

GetThreadLocale
LocalReAlloc
GlobalAddAtomW
GlobalAddAtomA
GetTickCount
GetModuleHandleW
CreateEventW
GetLocalTime
DosDateTimeToFileTime
CreateSemaphoreW
GetProcAddress
HeapLock
GetModuleHandleA
HeapFree
GetComputerNameExA
CloseHandle

gdi32

GetObjectA
CreatePen
GetTextMetricsW
UnrealizeObject
GetTextExtentPointA
CreateFontW
SetLayout
CreateRectRgnIndirect

user32

MenuItemFromPoint
LoadCursorW
GetDlgItem
GetWindow
TabbedTextOutW
DestroyAcceleratorTable
wvsprintfA
IsMenu
GetDialogBaseUnits
GetMessagePos
GetKeyboardLayoutNameW
GetClassLongA
GetMenu

Exports

Exports

?XExWpfkojcphJmtXdquk@@YGPANJPAK@Z
?gevRagab@@YGPAMPAIPAI@Z
?NArkEifI@@YGPAJPAHF@Z
?rsjSybgBx@@YGXMH@Z
?mvdOpzlQqmaViqkwnwpUk@@YGPAJNJ@Z

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6525c8dfafdeda65f48d36a1ddb08229

Headers

File Characteristics

PDB Paths

Imports

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 82KB

.edata Size: 512B - Virtual size: 244B

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 141KB - Virtual size: 141KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 82KB

.edata
Size: 512B - Virtual size: 244B

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 141KB - Virtual size: 141KB

.reloc
Size: 2KB - Virtual size: 1KB