d0bdcb92f79efb3922dcf1f33d2030ba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d0bdcb92f79efb3922dcf1f33d2030ba_JaffaCakes118
Size

112KB
MD5

d0bdcb92f79efb3922dcf1f33d2030ba
SHA1

f59971f2eee977b409f23ae849eb01a143ee8f6a
SHA256

4a4b0f719e58f59c8539834e229f4a531707fe3ba696a6b1f9708ef40b209648
SHA512

f44250c1c0e64715792adb2c13279b9fc2d6eaa50efc31a3523f2c502721ed47248b4bdfe424377f25c4a7d8c3aab3a6c047161c8a1f603791eeaeeab2d95fea
SSDEEP

3072:rcozykJl6n8hL1epaM1vdfSPCs8qha34Wqn3ZvF:rXll68o3kPCs8qY34W03L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0bdcb92f79efb3922dcf1f33d2030ba_JaffaCakes118

Files

d0bdcb92f79efb3922dcf1f33d2030ba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

78a6de349a230965046c7e841ec4fe13

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\ZNzmTgJf\NhRqtkhd\DEputWtv\TOtl.pdb

Imports

shlwapi

StrCmpNW

user32

GetWindowLongW
ScrollWindowEx
GetPropW
MessageBoxW
GetCursorPos
OpenDesktopW
IsCharUpperA
IsCharLowerA
ShowScrollBar
CheckRadioButton
SetRect
CreateAcceleratorTableW

kernel32

GetStartupInfoW
lstrcmpiW
LoadLibraryW
DuplicateHandle
FindFirstFileW
ReadFile
CreateNamedPipeA
GetCommandLineW
lstrcpynA
GetProcAddress
SetErrorMode
lstrcatA
lstrlenW
SetMailslotInfo

gdi32

CreateRectRgnIndirect
GetNearestPaletteIndex
TextOutA
EndDoc
SetAbortProc
ExtFloodFill

comctl32

ImageList_GetImageCount
ImageList_LoadImageW

Exports

Exports

?axHwdelp@@YGJPADPAM@Z
?vekhhJNcionvV@@YGPAXPA_NK@Z
?fWIbfnujEjtxgziq@@YGDPAJ@Z

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78a6de349a230965046c7e841ec4fe13

Headers

File Characteristics

PDB Paths

Imports

shlwapi

user32

kernel32

gdi32

comctl32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.idata Size: 1024B - Virtual size: 950B

.edata Size: 512B - Virtual size: 167B

.temp Size: 76KB - Virtual size: 76KB

.data Size: 5KB - Virtual size: 17KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.idata
Size: 1024B - Virtual size: 950B

.edata
Size: 512B - Virtual size: 167B

.temp
Size: 76KB - Virtual size: 76KB

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 2KB