eec1b5a92c38047705bc8699d64d0ed7_JaffaCakes118

General

Target

eec1b5a92c38047705bc8699d64d0ed7_JaffaCakes118
Size

52KB
MD5

eec1b5a92c38047705bc8699d64d0ed7
SHA1

addc789e730595e08dd573ab8d194110b794ed9f
SHA256

6630fbabce1ac10616a562d2b3dda0e6ca63302f5042de2663a30a9078301b97
SHA512

4c77c4006735417c2f7ff33ee39f0610d9dafce63b4b7eb94d629c316b395951af9dbbf26edbe290c5355c51a3e45e7303125eeb6c7fe62ddff4c015147217bd
SSDEEP

768:Fub7y0IK6YHFFLyBJH4RQHVfFpAnhPSD6GvEmcgpybpl8Np2FaeufXLPU6t:qG0IgHnyXH4REFpAhPkMmcgEpXchA6t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eec1b5a92c38047705bc8699d64d0ed7_JaffaCakes118

Files

eec1b5a92c38047705bc8699d64d0ed7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d06b660bcf044b377683e8369bd3b4dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\eucashoZ\cfdSwg\Oyfkfiiu\kzzeha.pdb

Imports

user32

DestroyWindow
ShowCaret
BeginDeferWindowPos
SetDlgItemTextA
GetKeyboardLayoutNameW
GetDlgItem
IsWindowUnicode
DrawIconEx
SetMenuDefaultItem
wsprintfA
TranslateAcceleratorA
ChangeMenuW
SetScrollPos

kernel32

SetThreadAffinityMask
OpenSemaphoreW
GlobalMemoryStatus
GetSystemWindowsDirectoryA
TryEnterCriticalSection
GlobalDeleteAtom
EnumResourceTypesA
CreateNamedPipeA
GetUserDefaultLangID
AddAtomW
lstrlenA
CreateWaitableTimerW

gdi32

CreateBitmapIndirect
CreateCompatibleBitmap
ExtFloodFill
GetTextCharsetInfo
EndDoc
EndPage
Rectangle
EnumFontFamiliesExW

Exports

Exports

?YcjobOidweGYkyslkblD@@YGDPAD@Z
?zqcxRxlBm@@YGXPAIK@Z
?enaibqCynWxFTLw@@YG_ND@Z
?bggxtwQVycppOW@@YGFE@Z
?JfemtiKWDkhNJNVMsZp@@YGJMJ@Z
?ljCfSpAsdRre@@YGMID@Z
?pdyZupadpDeZjudol@@YGKPAM@Z

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d06b660bcf044b377683e8369bd3b4dc

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 512B

.data Size: 14KB - Virtual size: 210KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 512B

.data
Size: 14KB - Virtual size: 210KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 1KB - Virtual size: 1KB