e230b70da130e049cec8ab3188f1d5d7_JaffaCakes118

General

Target

e230b70da130e049cec8ab3188f1d5d7_JaffaCakes118
Size

97KB
MD5

e230b70da130e049cec8ab3188f1d5d7
SHA1

df2a9d2092b6ef222c985a171433be9796a31124
SHA256

341956b44898ca0b7a29bf269d9d7f3a12b4786d118823437ad85fd777264753
SHA512

1ab67d9b31a9bcc594e51c0866312bc80d07916ac40c2e47657e7d39af2733d15e539f0bd0eed17525cefb93c9bb247a9850da3ed5aa7dd27f66b30798fa3856
SSDEEP

3072:15hDR0rfIHiBtLr9CSnR1cB5zm7/hLk4Ar:3hD1UHmpm7/hnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e230b70da130e049cec8ab3188f1d5d7_JaffaCakes118

Files

e230b70da130e049cec8ab3188f1d5d7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a954b9dd9e733e3b4216f533a47c1741

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

B:\TmfvQ\robKyx\frje.pdb

Imports

kernel32

GetProcAddress
CancelIo
GetComputerNameExW
CreateEventA
GetFileAttributesA
GetModuleHandleW
SetFilePointer
GetLocaleInfoA
QueryDosDeviceW
CopyFileA
WaitForMultipleObjects
EnumResourceNamesW
lstrcmpiW
GetSystemDirectoryA

gdi32

SetWindowExtEx
CreateRoundRectRgn
GetTextExtentPointA
PathToRegion
CreateCompatibleDC
CreateFontIndirectA
GetStockObject
GetViewportOrgEx
CreateFontA

user32

GetIconInfo
CreateDialogParamA
CreateWindowExW
SetMenuDefaultItem
FindWindowA
GetKeyboardLayoutNameW
GetMenuItemRect
GetSysColorBrush
SetWindowPos
SetDlgItemTextW
CharNextW
SetDlgItemTextA

Exports

Exports

?iuthJPscwHYdad@@YGPAEPAM@Z
?ehQYFUaAWoppaowH@@YGPADPAEI@Z
?ozflWTyex@@YGPAHE@Z
?vaLqpnvqImqLmhcgKawztj@@YGHPAKN@Z
?knhbUtvrn@@YGPAKGI@Z
?ekjhpwUcaAhjcmCyn@@YGXJ@Z

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 827B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a954b9dd9e733e3b4216f533a47c1741

Headers

File Characteristics

PDB Paths

Imports

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 1024B - Virtual size: 827B

.data Size: 3KB - Virtual size: 23KB

.crt Size: 10KB - Virtual size: 10KB

.rsrc Size: 66KB - Virtual size: 66KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 1024B - Virtual size: 827B

.data
Size: 3KB - Virtual size: 23KB

.crt
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 66KB - Virtual size: 66KB

.reloc
Size: 2KB - Virtual size: 1KB