eac59aa13a85943921230368aa9b5ed6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

eac59aa13a85943921230368aa9b5ed6_JaffaCakes118
Size

148KB
MD5

eac59aa13a85943921230368aa9b5ed6
SHA1

cc48d6938526e4d594d1bbb64e995c206cd63f05
SHA256

6f0ef8e1233eb468bcfe072e2a5b9e87c24ae90bdfbe9f628bab148474178823
SHA512

4a36d823f46edb65f6856e18feeac84b0011ff5288da464241139d6928d14c386f4e606175b88723c8e25ce20e1bc48691bc0a8078539bcaacda5d4645a1f1ca
SSDEEP

3072:05EHENWuAglqQcngq5KGfDJCUrdrVPjTSgUjrZ9Wxb9k40WPL:GKEVlqb/nbJCUrD72gUvkJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac59aa13a85943921230368aa9b5ed6_JaffaCakes118

Files

eac59aa13a85943921230368aa9b5ed6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1c285ee8dadb93ba254571fad5a2bcae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\iajSLr\CVado\YKbXV\ljrge.pdb

Imports

gdi32

GetBkMode
GetDeviceCaps
GetObjectW
EnumFontFamiliesExW
GetSystemPaletteEntries
EndPage
SetPaletteEntries
SetDIBColorTable
TextOutW
GetStockObject
Polygon
SelectPalette
GetPaletteEntries
EndDoc

kernel32

FindResourceA
LoadResource
GetFileAttributesExA
lstrcpynW
PulseEvent
SetFileApisToOEM
LocalReAlloc
SetCurrentDirectoryA
VirtualFree
TryEnterCriticalSection
GetNumberFormatA
GetCurrentThread
GetProcAddress
GetThreadLocale

ole32

OleUninitialize
OleInitialize

user32

InsertMenuA
LockWindowUpdate
SetDlgItemTextA
CharPrevW
EnumWindows
RemoveMenu
GetUserObjectInformationA
GetClassLongA
GetClassInfoA
DrawAnimatedRects
GetShellWindow
MapVirtualKeyW
ReplyMessage
CreateCaret
AdjustWindowRectEx
UpdateWindow
GetMessageA
SendDlgItemMessageA
ChildWindowFromPointEx
DefFrameProcW
GetDoubleClickTime
MessageBoxA
CharUpperBuffW
MessageBoxExA
GetWindowTextA
LoadIconA
RemovePropW
LoadImageA
GetKeyState

Exports

Exports

?ckzl_NVV_IvtnzlOV@@YGMJ@Z
?uhfrb_wvcEmcq_V@@YGPAFII@Z
?VFHFYPZRql_yCvhgufq@@YGXI@Z

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 11KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c285ee8dadb93ba254571fad5a2bcae

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 89KB

.rdata Size: 21KB - Virtual size: 21KB

.mdata Size: 11KB - Virtual size: 114KB

.data Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 90KB - Virtual size: 89KB

.rdata
Size: 21KB - Virtual size: 21KB

.mdata
Size: 11KB - Virtual size: 114KB

.data
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB