ddc888d047f95aac4e6d72ea99992447_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ddc888d047f95aac4e6d72ea99992447_JaffaCakes118
Size

112KB
MD5

ddc888d047f95aac4e6d72ea99992447
SHA1

438b94af1345ef44fd77a57f3d33fc232d5cefad
SHA256

0eba6b6acebbe5e376f91f346e08ed1b4e0dec1982672e3aa161544c3ac7bb6f
SHA512

4537e7b10f92a4f2d9046148577a0fabfb316a171e31caaaf9083f707000c9fc6475f1826410aad3108d33e4e39f03867ff4ef13e702dbcac1cc528288687be0
SSDEEP

1536:v46yBP2l5tZW7vGFHvoA8T9n0TD+RXF2uIEbe/teu7fpYgBvnAgto9YZ7:v4NBeKr6PobGDCUa6tespYk5tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddc888d047f95aac4e6d72ea99992447_JaffaCakes118

Files

ddc888d047f95aac4e6d72ea99992447_JaffaCakes118
.dll windows:5 windows x86 arch:x86

75c3a86c5b303f7155e93a86e5ef4ce5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

A:\tgHm\lykx\hzWagO\mhCyB\AndzBwS.pdb

Imports

kernel32

lstrcmpiW
GetSystemDefaultLangID
GetProcAddress
lstrlenW
LoadLibraryW
SetMailslotInfo
LeaveCriticalSection
FindNextFileA
GetCurrentDirectoryW
GlobalAddAtomW
IsBadCodePtr
GlobalLock
HeapSize

comctl32

ImageList_Remove
CreatePropertySheetPageW
DestroyPropertySheetPage

comdlg32

ChooseColorW
FindTextW

gdi32

CreateBitmap
RestoreDC
Polyline
StretchBlt
GetSystemPaletteUse
CombineRgn

shlwapi

StrCmpNW

user32

ShowCaret
ShowScrollBar
IsDialogMessageW
LoadCursorW
LoadCursorA
GetWindowLongW
GetSubMenu
keybd_event
GetMenuStringW
DrawStateA
IsCharUpperA
GetPropW
EnableMenuItem
GetWindowTextA

Exports

Exports

?dQUryynDWIuLtvZV@@YGFI@Z
?jxCsjMUZvAildfP@@YGKMH@Z
?oBIyEEQy@@YGKEPAF@Z
?dsfyzygiyreTbf@@YGKPAJ@Z

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75c3a86c5b303f7155e93a86e5ef4ce5

Headers

File Characteristics

PDB Paths

Imports

kernel32

comctl32

comdlg32

gdi32

shlwapi

user32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 196B

.temp Size: 77KB - Virtual size: 77KB

.data Size: 5KB - Virtual size: 17KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 196B

.temp
Size: 77KB - Virtual size: 77KB

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB