b5de9222e2558d2d3910d1929a3c05b7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b5de9222e2558d2d3910d1929a3c05b7_JaffaCakes118
Size

223KB
MD5

b5de9222e2558d2d3910d1929a3c05b7
SHA1

45cae68019630202fc62492175dd0b12c744ef74
SHA256

2d97c2d4654cce69373367e4e058eeb293ae209830bce3aecb6a4858064c5a21
SHA512

36d7b54ea52e7701c04b5f5e7f93626dded8810843f5b1d245644be14ca36e3eed90224abd5ea2bbc6b6f66bbf7c93165c293b33eaec3b777b5bbbad216b8921
SSDEEP

6144:0wpuX3kswtEs8icdLQvBw9BPfM4X8J/y:0U1GevBsPkk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5de9222e2558d2d3910d1929a3c05b7_JaffaCakes118

Files

b5de9222e2558d2d3910d1929a3c05b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43ac37a52dc01d82f81107f9a93fa8da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\CKOqDarhZjfhzuhPVimK\wriaslrdGbrcwzLDk\cboogJvixCveucrxlFQmeT\ahtzktPiyan\qlzWpypvtvd\IrQMfbyZNTCl.pdb

Imports

gdi32

SetAbortProc
ScaleWindowExtEx
GetCurrentObject
CreatePolygonRgn
CreateBitmapIndirect
SetBitmapDimensionEx
GetDeviceCaps
GetPixel
OffsetViewportOrgEx
GetLayout
EnumFontFamiliesExW
Polyline
GetSystemPaletteUse

user32

KillTimer
SetWindowTextA
CallWindowProcA
ShowWindow
GetPropW
FindWindowExA
IsIconic
DrawFocusRect
LoadStringW
CharPrevW
AdjustWindowRectEx
TranslateAcceleratorW
InternalGetWindowText
MonitorFromRect
LoadCursorW
SendMessageTimeoutA
GetDC
SendDlgItemMessageA
CharUpperBuffW
DefWindowProcW
TrackPopupMenu
GetKeyboardLayoutList
GetWindowLongA
CreatePopupMenu
GetDCEx
EndDialog
SetWindowLongW
CreateIconIndirect

shlwapi

StrChrIW

kernel32

FindResourceExW
GetModuleHandleW
VerSetConditionMask
FileTimeToDosDateTime
GetLastError
GetComputerNameW
FindNextChangeNotification
lstrcmpW
VerifyVersionInfoW
GetVersionExA
SetLastError
lstrcmpiW
ReleaseSemaphore
GetTimeZoneInformation
MoveFileExW
lstrcpyW

shell32

ord195
ord196

Exports

Exports

?DUIidJLdlukydILKDFyiuITFUf6utydyifdikgfgfdhgfd@@YGKEPA_WG@Z

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43ac37a52dc01d82f81107f9a93fa8da

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

shlwapi

kernel32

shell32

Exports

Exports

Sections

.text Size: 137KB - Virtual size: 136KB

.rdata Size: 70KB - Virtual size: 70KB

.mdata Size: 11KB - Virtual size: 11KB

.data Size: 1KB - Virtual size: 161KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 137KB - Virtual size: 136KB

.rdata
Size: 70KB - Virtual size: 70KB

.mdata
Size: 11KB - Virtual size: 11KB

.data
Size: 1KB - Virtual size: 161KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB