b946fd0fb2613484a81b6601a4fc3ebd_JaffaCakes118

General

Target

b946fd0fb2613484a81b6601a4fc3ebd_JaffaCakes118
Size

168KB
MD5

b946fd0fb2613484a81b6601a4fc3ebd
SHA1

d802c758f78de0dfd88f5e19405d4b1101e16ea7
SHA256

d61be8e586e1648deb84026407fa6ed0be1a2a1d086fb82e15353301936e7112
SHA512

34def406625fff3121b728b0d86d4cb9e6f63db8f2cbddb17eac4f8a972fc476e6183e09eb6ed24a3dc20a015e6b99cea8552a8dab4aa74c2888391b3c75ddd3
SSDEEP

3072:k1IM6ptoGzKtuNMSL1KyY6cDcw6IKPhjoXfhFYex1j2UuZiVeqUL4vlX5h3sqm:wITtzc8xt1PmXfrbl2dqUMvl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b946fd0fb2613484a81b6601a4fc3ebd_JaffaCakes118

Files

b946fd0fb2613484a81b6601a4fc3ebd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Write
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_Remove
ImageList_Draw

gdi32

GetDIBColorTable
CreateDIBitmap

user32

GetCursor
OpenIcon
GetClientRect
GetClipboardData
GetCursorPos
GetMenu
DrawMenuBar
GetDC

kernel32

VirtualAlloc
ReadFile
GetModuleHandleA
LoadLibraryA
SetEndOfFile
GetLastError
ResetEvent
ExitProcess

Exports

Exports

UYS3Zdz67@24
BwEO5d
_oiPxl37Yg@16
_07aJGH@8
_cTzcbZDl
cihl3DJrW1Ge
_fw3qEh3A
_RUJ5N
LsERixT58no8Y
_6ZOTxx2u0x
_cT90GypzD3W@24
_clEQfN6ibVY8U
_IqhP3CPp@16
124EIM@20
DHjC2tq@8
_Zo9wLjajXExH9
05TUiBVj
_SWA6DoceDk@24
DUvhlIWEgxJpJS@4
OEjcY98GT@8
_tXRTxmXrGnsbc@20
t_GKzV1qXOQQxm
s702xPvTqJMAfn@8
8LDtqD
_UjMcbLXsOQP@20
jMuCr7v7@16

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

Imports

comctl32

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 182KB

.data Size: 148KB - Virtual size: 148KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 182KB

.data
Size: 148KB - Virtual size: 148KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB