ea86d59c4a66c0b1466a34fe96f065d9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ea86d59c4a66c0b1466a34fe96f065d9_JaffaCakes118
Size

158KB
MD5

ea86d59c4a66c0b1466a34fe96f065d9
SHA1

e1380a4244fe2ce45a0ed96e20a9ed8f4258b4c7
SHA256

cffa0bd790f21a20ee008dcf04dbd14dab9682fe6187f372d35b8c40544ecadc
SHA512

9df8914d0e5910bce538b13c61b41b096f2d8206bfa0530ec6a4bf9ad8e526bb723ca2ca7a7ced3eabf5d401f9ef37692a95be0e976488a4a61fa60f9f3bf17f
SSDEEP

3072:MDxp+R7IW/VIgMMnwYpbuxFjRMyZrV3VWL57ae2i0cEwBJ:Mdp+R7Z9zwY9uxPrV3aV1dmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea86d59c4a66c0b1466a34fe96f065d9_JaffaCakes118

Files

ea86d59c4a66c0b1466a34fe96f065d9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b4e91044e4cf9433ea8e6d5d7ac5db30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

B:\jiqd\szblF\Bloxmd.pdb

Imports

comdlg32

PrintDlgExW
GetSaveFileNameA

shlwapi

StrCpyW
StrToIntA
UrlGetPartW

gdi32

CreateRoundRectRgn
EnumFontFamiliesExW
GetTextCharsetInfo
SelectObject
GetTextColor
GetNearestColor

comctl32

ImageList_Read
ImageList_LoadImageW
ImageList_ReplaceIcon

kernel32

GetExitCodeThread
lstrcmpiW
GetTempPathW
lstrcmpiA
GlobalFree
ExitProcess
RegisterWaitForSingleObject
FreeLibrary
lstrcpyW
GetLongPathNameW

user32

MoveWindow
mouse_event
GetDlgItemInt
GetCaretPos
GetUserObjectInformationA
InsertMenuW
CopyAcceleratorTableW
ShowWindowAsync
IsCharAlphaNumericW
IsChild
wvsprintfW
SendMessageW

Exports

Exports

?g_qbwgDKXsgebef_@@YGPAJD@Z
?WXESZbp_fprj_kWPyks__@@YGPAGPAG@Z
?BRGZ_W_XVFOM@@YGJPAF@Z
?Y_XHLv_ewsq_LYVN_I@@YGGDM@Z
?LCLFRw__KB_BT_PM__O_@@YGKJD@Z
?WQ_PRWwlamJ__W@@YGKIJ@Z

Sections

.text
Size: 57KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pacdat
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4e91044e4cf9433ea8e6d5d7ac5db30

Headers

File Characteristics

PDB Paths

Imports

comdlg32

shlwapi

gdi32

comctl32

kernel32

user32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 389KB

.data Size: 36KB - Virtual size: 35KB

.idat Size: 15KB - Virtual size: 15KB

.rdata Size: 19KB - Virtual size: 19KB

.pacdat Size: 20KB - Virtual size: 20KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 57KB - Virtual size: 389KB

.data
Size: 36KB - Virtual size: 35KB

.idat
Size: 15KB - Virtual size: 15KB

.rdata
Size: 19KB - Virtual size: 19KB

.pacdat
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB