c75ed8b112c6c430d80fc4e1eb2b25a4_JaffaCakes118

General

Target

c75ed8b112c6c430d80fc4e1eb2b25a4_JaffaCakes118
Size

105KB
MD5

c75ed8b112c6c430d80fc4e1eb2b25a4
SHA1

56ff0dd1006b7cad7dd85adf2837b48c67a29ba5
SHA256

7122473edd6a377184b57ba43cb79cda5bb36f1cf6ac345272e7a15cbd8b34a1
SHA512

2ee5a7af7ed5895b173d9180d8f62b16fe4ec07ae3e76fbd6fb19744379f6fed2818a92e9bd40e28cc9963608f8b4cfb079d5bd2c22bf0fa8998576fa005cce5
SSDEEP

3072:Yqcs26pMTXlAqNDLOfCwsrV/Gn9jtu/nLNf3:e6OlN/OKGn9xMLNf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c75ed8b112c6c430d80fc4e1eb2b25a4_JaffaCakes118

Files

c75ed8b112c6c430d80fc4e1eb2b25a4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

70659d9f2fd4bfb938eb9e0291f8568d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

J:\tAEort\esEycLpb\kpgRRt.pdb

Imports

user32

MenuItemFromPoint
GetDCEx
ActivateKeyboardLayout
SetRectEmpty
GetMenu
GetDlgItemTextW
GetSysColor
wsprintfA
DispatchMessageW
SetSysColors
GetWindow
GetClassLongA
MonitorFromPoint
LoadCursorW

kernel32

GetThreadLocale
GetModuleHandleA
GetProcAddress
CreateDirectoryW
GetModuleHandleW
FindResourceW
LockFile
CloseHandle
GetCommandLineW
CreateEventA
CompareStringW
CreateEventW
CreateFileMappingW
GetTickCount

gdi32

CreateDCW
GetTextAlign
SetBkMode
CreateRectRgnIndirect
SetDIBColorTable
Escape
GetSystemPaletteUse

Exports

Exports

?qINalcrowgpxPiyoklict@@YGXF@Z
?xUtBtubhZkfiyltxsfwQoh@@YGXPAIJ@Z
?cUtSibkgjw@@YGDND@Z
?clPmlpIPmmwBiRDLckVi@@YGPAXPAK@Z
?jBpyNqIOjOr@@YGJPAIPAJ@Z
?miuNOahifEYwUecth@@YGGI@Z
?dbeTufrswkh@@YGGM@Z

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70659d9f2fd4bfb938eb9e0291f8568d

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 2KB - Virtual size: 10KB

.edata Size: 512B - Virtual size: 322B

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 77KB - Virtual size: 77KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 2KB - Virtual size: 10KB

.edata
Size: 512B - Virtual size: 322B

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 77KB - Virtual size: 77KB

.reloc
Size: 2KB - Virtual size: 2KB