b9af2a67138632e33024f7e908b14dcd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b9af2a67138632e33024f7e908b14dcd_JaffaCakes118
Size

158KB
MD5

b9af2a67138632e33024f7e908b14dcd
SHA1

9cff79463b702a52449e484e963db090d53e8a39
SHA256

36cc554d66be29e4a4d76e7e30c6758247147a47cec9ae334036406fd296085b
SHA512

2fc5a8f496aa10b50bba8b2e328109b9e3c9ac9e3c6bae0333fbb390e44121cd906935fc9188126a082e5ca316ccd0e5726862358984b0b863d9422b5f5e3a38
SSDEEP

3072:uJ1NIiomnH25iR2ALeN28P4W+eygZ3/0FDdbOp:EzIivnHgiR2hN2ep+CFkbO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9af2a67138632e33024f7e908b14dcd_JaffaCakes118

Files

b9af2a67138632e33024f7e908b14dcd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

be58f73e73f81adf83cefa4ee219ce50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\qscryn\tqea\Mglr\xobtl\erWhqEp.pdb

Imports

user32

GetClassInfoExA
TranslateMessage
SwitchToThisWindow
ArrangeIconicWindows
ShowWindowAsync
GetActiveWindow
IsDialogMessageA
CharLowerBuffW
CheckMenuItem
GetFocus
MonitorFromPoint
SetWindowTextA

comctl32

ImageList_LoadImageW
ImageList_ReplaceIcon

gdi32

GetTextCharsetInfo
GetCurrentObject
SetViewportOrgEx
SetDIBitsToDevice
SelectObject
CreateBitmapIndirect

kernel32

SystemTimeToFileTime
lstrcmpiA
GetFullPathNameA
EnumSystemLocalesA
WinExec
lstrcpyW
CompareStringW
GetDateFormatA
lstrcmpA

shlwapi

StrToIntW
StrCpyW
UrlGetPartA

Exports

Exports

?WcCOURNlpMp_@@YGPAXPAF@Z
?__RAHWC_XRDlpchzhk_qnU@@YGPAHPAKG@Z
?XO_C_OK_@@YGXPAH@Z
?E_qlbNPL_Hajhplvy@@YGJPAIPAF@Z
?SVVEMCpBIuLXMGC_DEHKG@@YGXE@Z
?_nmVN_K_LTTat@@YGPAXF@Z
?bstbb_raV__S_KCK@@YGHPAII@Z
?v_yofapuuab__fbw___@@YGPAJPAD@Z
?keq_IT___NZ@@YGMG@Z
?ivz_fAGOMGsxut@@YGMKE@Z

Sections

.text
Size: 57KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pacdat
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be58f73e73f81adf83cefa4ee219ce50

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

gdi32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 388KB

.data Size: 40KB - Virtual size: 39KB

.pacdat Size: 16KB - Virtual size: 16KB

.idat Size: 15KB - Virtual size: 15KB

.rdata Size: 20KB - Virtual size: 19KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 57KB - Virtual size: 388KB

.data
Size: 40KB - Virtual size: 39KB

.pacdat
Size: 16KB - Virtual size: 16KB

.idat
Size: 15KB - Virtual size: 15KB

.rdata
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB