b6cbbd99c18be2026c5ca3f999c066c7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b6cbbd99c18be2026c5ca3f999c066c7_JaffaCakes118
Size

80KB
MD5

b6cbbd99c18be2026c5ca3f999c066c7
SHA1

a3dd39c20fbcf7c67f45c87c517842430d650427
SHA256

2f54e8a3e800c00c60542250f7b644c529240f1d75bf25c51d4e3262089c2cbd
SHA512

1bbfd07635b00d082afbbfc0c850a904bac9615f11264e0bc9ba940206fc23199ca67f8336eafb8a2a781d1873438cbad82523db13209a8a2735df83f6c73b3b
SSDEEP

1536:y0z1vFjwJ3j4fN40QtPGMFM1MQ6SB2+cIgGHs+6Wffdb:y4jjw94+0K+MFM1MQ6SM+hY+Vfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6cbbd99c18be2026c5ca3f999c066c7_JaffaCakes118

Files

b6cbbd99c18be2026c5ca3f999c066c7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

254942e97269252199bcac65a5010e8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\edMlesw\SfpI\hTsgSish\gVds\jwfb.pdb

Imports

comctl32

PropertySheetA
CreateToolbarEx

user32

TranslateAcceleratorA
DrawFocusRect
SetScrollPos
GetDesktopWindow
GetWindow
CopyImage
OpenIcon
SetWindowTextA
DefWindowProcW
GetParent
CreateCursor
wsprintfW

kernel32

FindClose
GetShortPathNameA
SetSystemTime
GetCommModemStatus
MapViewOfFile
lstrcmpiW
DeviceIoControl
lstrlenW
lstrlenA
VirtualAlloc
EnumSystemLocalesA
GetComputerNameA
OpenEventW

gdi32

SetViewportExtEx
SetPaletteEntries
RoundRect
GetBitmapBits
GetObjectW
GetDeviceCaps
SetStretchBltMode
DeleteDC

ntdll

_aullrem

Exports

Exports

?wXzjYYumytYcLvxbQOVjr@@YGPAXD@Z
?sjdUalLpacefenHomnLv@@YGKPAI@Z
?CVtsdjWaK@@YGKIJ@Z
?JMjooTsezrfsRh@@YGGPANF@Z

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.new
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

254942e97269252199bcac65a5010e8c

Headers

File Characteristics

PDB Paths

Imports

comctl32

user32

kernel32

gdi32

ntdll

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.data Size: 17KB - Virtual size: 93KB

.pdata Size: 2KB - Virtual size: 2KB

.idata Size: 1KB - Virtual size: 1KB

.new Size: 129KB - Virtual size: 129KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.data
Size: 17KB - Virtual size: 93KB

.pdata
Size: 2KB - Virtual size: 2KB

.idata
Size: 1KB - Virtual size: 1KB

.new
Size: 129KB - Virtual size: 129KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 3KB - Virtual size: 2KB