fa401f46683c8316e274b1e5214a83e6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fa401f46683c8316e274b1e5214a83e6_JaffaCakes118
Size

57KB
MD5

fa401f46683c8316e274b1e5214a83e6
SHA1

b81077276b33f593ebc17c8d862dcbb3d6d7f1ef
SHA256

50fe0b230500cedc1de9f20c9aae1951e0cfe8ad7fefdc25cc635e254e7dfc52
SHA512

58a6ebee867c020787482c5b1c18db6b096df38c06fd0d141a9d1fc82b028bbe7c4abf644e7192dbfbacb6b569b9006608abdaf06de10fae688a2c50a59641ba
SSDEEP

768:hSYlcHZo8UtCsQ2ICLl4e/AvQjUufoJBbfkcTlB8cIOfb35FokNHMKc3a1OUGca1:UqcHZpvsQ2Iv/mo/5BLPbpFo5KoKQrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa401f46683c8316e274b1e5214a83e6_JaffaCakes118

Files

fa401f46683c8316e274b1e5214a83e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aeeb9f7006b21306b1c230615df1396a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\xCpd\vtfoqgcv\ufSdeF.pdb

Imports

comdlg32

GetFileTitleW
GetOpenFileNameA

msvcrt

exit

shlwapi

StrSpnA
PathMakePrettyA

gdi32

ExtFloodFill
RealizePalette
SetBkMode
PtVisible
SetBitmapDimensionEx
SetPixel

kernel32

HeapUnlock
GetCurrentProcessId
QueryPerformanceCounter
SetPriorityClass
FindClose
ExitProcess
GetProcAddress
lstrcmpiA
OpenFile

user32

GetDlgCtrlID
GetUserObjectInformationW
InSendMessageEx
ValidateRect
PostMessageW
DrawTextExW
IsDlgButtonChecked
ArrangeIconicWindows
GetClientRect
GetMessagePos
RegisterHotKey
DeferWindowPos
OpenDesktopW

Exports

Exports

?B_OD_R__Dsr__kapdG_PDE@@YGPAII@Z
?MXSVYTVDU_@@YGIM@Z
?__kg_ed_wqgqd_x@@YGPAXPADPAK@Z
?nlOOMU_Pmjsj@@YGJPADPAF@Z
?_oDS_ULI@@YGEF@Z
?JBBVM_W_wgcjjM@@YGGNE@Z
?pwrsxo_w_ykyiXRPRhyjc_@@YGKPAD@Z
?ytxvVMCU_lh@@YGFID@Z
?_stwhvsuLV@@YGPAHPAMPAH@Z
?h_yin___pg_J@@YGPAIPAD@Z
?UKOqkpfutSC_Fy_f_xrtg@@YGPAKEPAK@Z
?QR_C_Mbla_@@YGGG@Z
?n_yd_uz_aqjrd@@YGJPAJ@Z
?XGGIl_dhagcfo_FCE_@@YGPADE@Z
?__hkdcb__RGijuteidxthE@@YGPAKKJ@Z
?SGF_OL_zz_nuwSZhdvn@@YGEPAD@Z
?__I_P_AK_EKMAGO_L@@YGEKE@Z

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aeeb9f7006b21306b1c230615df1396a

Headers

File Characteristics

PDB Paths

Imports

comdlg32

msvcrt

shlwapi

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 5KB - Virtual size: 80KB

.rdata Size: 10KB - Virtual size: 10KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 5KB - Virtual size: 80KB

.rdata
Size: 10KB - Virtual size: 10KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB