d4083a39c8165b12a6e8dc31ca6d1115_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d4083a39c8165b12a6e8dc31ca6d1115_JaffaCakes118
Size

222KB
MD5

d4083a39c8165b12a6e8dc31ca6d1115
SHA1

115320ca4ba37e8e963c12bfcb5944fefad41f26
SHA256

07afd742358df8cc6ccfe62fa72ff560ad812b9a0833e77896294c611f019845
SHA512

61d55bfd6e2d58049112e92661dcac861b882ada131c3e19e96bb3fca63d5a7d3fb8391c6d0daa58d7f3c580b3e1234b4c857cd3fff21c09418b8c1caa4453fc
SSDEEP

3072:gLnTAWPzSn4P2fVKvC+jguO94koXzyIuDZDafLi1q5mPmLu17Ka1cM2hu1PpItBa:gYCG4+fVWC+CSk9eW1ULza1cMj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4083a39c8165b12a6e8dc31ca6d1115_JaffaCakes118

Files

d4083a39c8165b12a6e8dc31ca6d1115_JaffaCakes118
.dll windows:5 windows x86 arch:x86

063e3756737dcf8af76d5ec695c2b51d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Z:\rcegs\wXfmubLV\fTkc\yrpjl.pdb

Imports

comdlg32

CommDlgExtendedError
GetOpenFileNameA

gdi32

TextOutW
SetROP2
ExcludeClipRect
GetPixel
GetRgnBox

comctl32

CreatePropertySheetPageA
ImageList_ReplaceIcon
ImageList_LoadImageW

user32

IsDialogMessageW
LoadIconA
IsCharLowerW
DrawAnimatedRects
ScrollWindow
LoadBitmapA
RegisterClassExA
GetCaretPos
DeleteMenu
SetRectEmpty
LoadStringW
RegisterClassW
CreateWindowExW

shlwapi

PathFindExtensionA

kernel32

lstrcatA
DuplicateHandle
RegisterWaitForSingleObject
IsBadCodePtr
IsBadStringPtrW
GetCurrentProcessId
GetNumberFormatA

Exports

Exports

?cuUWWASH__scpJ_weIG_Q@@YGPAGMPAD@Z
?ASJQBE_KKMQmrj@@YGEPAE@Z
?qcaIHDFHfy@@YGXJN@Z
?qu__ohokoekMenovQ__H_@@YGMK@Z
?_p_cpp_dIW_@@YGPAXD@Z
?_lprwdv_t__M_TU@@YGPADD@Z
?NZVCPru@@YGGH@Z
?sJMThrla_c@@YGPAXE@Z
?cktvsls_sBI__QXdg@@YGGGD@Z
?d__eaGHP__Ygz@@YGKNF@Z
?JUW_PEouugVTICJZC@@YGPAND@Z
?OrkM_O__DDUzi_y@@YGPAIPADPAH@Z

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA1
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA2
Size: 77KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

063e3756737dcf8af76d5ec695c2b51d

Headers

File Characteristics

PDB Paths

Imports

comdlg32

gdi32

comctl32

user32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 512B - Virtual size: 187B

.data Size: 2KB - Virtual size: 2KB

DATA1 Size: 34KB - Virtual size: 33KB

DATA2 Size: 77KB - Virtual size: 240KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 512B - Virtual size: 187B

.data
Size: 2KB - Virtual size: 2KB

DATA1
Size: 34KB - Virtual size: 33KB

DATA2
Size: 77KB - Virtual size: 240KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB