e2a695764004615ce95eb2405f1e36b8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e2a695764004615ce95eb2405f1e36b8_JaffaCakes118
Size

50KB
MD5

e2a695764004615ce95eb2405f1e36b8
SHA1

3e3e19180adb273f882ef700feb870075524055e
SHA256

89f652cf7ffbd3698f4f7ede5a53c638868706d24d3367a1a18f1b3e3806ad18
SHA512

d57819978f592ec5e86442ae8c2c6af4d92bf5f6f5220ecde79c06e44cc9f8b55b575bc319be483ccd3e64142076877539d167188d7f95b20a3afed4909cac25
SSDEEP

768:rmYhFpv5qL2K33/gXZlgQprcQEoM1xOPmazukZNNX9BM99OeQOH+mjhtoLvtQLyM:rj7Fv8iCQ2dl1Ezuz9OetfhtoJaPCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2a695764004615ce95eb2405f1e36b8_JaffaCakes118

Files

e2a695764004615ce95eb2405f1e36b8_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b167132ff66a8d2b2b7a785c1069f3a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

L:\NHpl\HnSjCZ\XvcviW\Mvav.pdb

Imports

gdi32

CombineRgn
SetLayout
GetTextFaceW
WidenPath
LineDDA
CreateFontW
EndDoc
OffsetRgn

shlwapi

PathGetArgsW

user32

CharPrevW
SendMessageTimeoutA
IsCharLowerA
AdjustWindowRect
GetDlgItemInt
IsWindow
WaitMessage
GetMenu
SendMessageTimeoutW
SetCursorPos
GetWindowTextLengthW
GetForegroundWindow
BeginPaint
wsprintfW
ClientToScreen

kernel32

FindClose
GlobalFindAtomW
GetThreadContext
DisconnectNamedPipe
CreateFileMappingW
SetPriorityClass
IsBadReadPtr
UnmapViewOfFile
InterlockedExchangeAdd
Sleep
RegisterWaitForSingleObject
HeapWalk
HeapValidate
SetFilePointer

Exports

Exports

?kxOydcxb@@YGXPADK@Z
?BurjDnqcvcoqyQL@@YGIPAIE@Z
?qynErnke@@YGPAMM@Z
?pqwinNqbnsBXil@@YGIPAF@Z
?tlhmtseO@@YGPAXGM@Z
?VvhmhDgkJqbkoN@@YGGGM@Z

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b167132ff66a8d2b2b7a785c1069f3a6

Headers

File Characteristics

PDB Paths

Imports

gdi32

shlwapi

user32

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.itext Size: 512B - Virtual size: 168B

.data Size: 2KB - Virtual size: 190KB

.rdata Size: 3KB - Virtual size: 3KB

.import Size: 1KB - Virtual size: 1KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.itext
Size: 512B - Virtual size: 168B

.data
Size: 2KB - Virtual size: 190KB

.rdata
Size: 3KB - Virtual size: 3KB

.import
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 1KB - Virtual size: 1KB