fd07bbfa21b8fd68a36155c58c6cb85a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd07bbfa21b8fd68a36155c58c6cb85a_JaffaCakes118
Size

483KB
MD5

fd07bbfa21b8fd68a36155c58c6cb85a
SHA1

fc308ec837e71c8e2626026ef9bb4cce10691989
SHA256

36181d85d00789aeb45a721e0e59cfe81f3ce5b14320ea27bc9086b9dd867d4b
SHA512

37fd50b8c785654aef04c8faea7bd84c31d814eb7fc7f3dd810833ded4ddc1199fc9e3c0f81d8c4329421661fc9223d3ee5cdc0a4ebac6f0a0297dcceb743b45
SSDEEP

3072:G0z3AIMh57BIqaQFgQoNHJdkGdBLNl58fVLo63R8Dk/93Y5LHzSJvz5IINZ2If3Y:xMh5tDD4cG/GVPODuCzSYIbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd07bbfa21b8fd68a36155c58c6cb85a_JaffaCakes118

Files

fd07bbfa21b8fd68a36155c58c6cb85a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

775dec764c4d4b8fb21740e33c7f6f23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

FindTextA
GetSaveFileNameA
GetFileTitleA
ChooseColorA

comctl32

ImageList_Destroy
ImageList_GetBkColor
ImageList_Add

kernel32

LoadLibraryA
VirtualAllocEx
GetStartupInfoA
GetThreadLocale
GetModuleHandleA
GetProcessHeap
ExitProcess

user32

GetSysColorBrush
GetWindowTextLengthA
SetScrollInfo
SetScrollRange
CharLowerA
SetTimer
GetWindowDC
GetMenu

Exports

Exports

_yH6uvdIB
HHRWvlLoZmcCRO@16
_h3P4A@16
pNxS1
_jcVeeHDtLg
FVu3q8hBAY@24
MnsLQ_GK7oFtL@16
EEDtX@20
_daA3vVVm@12
_qaB1r
_uipDOLKPPfba59@12
Oxn9vkJJC6D0@20
rHSs1uvo5fD8
_kuz2s@20
F3_mLqq
_MnoglFM3T@4
_uB8mV8LPQJzAU@4
_T6D7cn0l2
_YgnUnJUnn1@16
_TYv_q@12
qTdgpZa
_fjvW7rWXHA@8
_zu17M81K4T4lk
_vWAUpXimV
_vMAMEHlY
snmGCX5
LQB_MyJYq8QFS
_yLna8g@24
s36r3o_aO5oL@12
U7jxdpR
_kyZAJpcp0H0yU@24
_0eA0hGh5QHinF
_wD0HYEEO7dVQZm@8
_TsLJyGjJZ@20
_UvQk1pTLgkz@16
_KxkdEF4@16
_qTF6_ektvY3n15@16
_T4EsdIkO
_MIyizOAyptUeZ@24
ksWYhvCwy1Hq3
mqTDS
GwmxfS
wIMlCZJj
_NggOLNOn
_8b_gulQp41x@12
443stJ@16
_vQOqnDlrv@20
fgDx3@4
_rUMaZEr

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

775dec764c4d4b8fb21740e33c7f6f23

Headers

File Characteristics

Imports

comdlg32

comctl32

kernel32

user32

Exports

Exports

Sections

CODE Size: 10KB - Virtual size: 10KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 442KB - Virtual size: 442KB

.idata Size: 1024B - Virtual size: 724B

.thdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 10KB - Virtual size: 10KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 442KB - Virtual size: 442KB

.idata
Size: 1024B - Virtual size: 724B

.thdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB