ff8afaa12d79687422446ed7b531986e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ff8afaa12d79687422446ed7b531986e_JaffaCakes118
Size

124KB
MD5

ff8afaa12d79687422446ed7b531986e
SHA1

cdd7b4701f85027202fe3e3b08ea3d7c88056c16
SHA256

58dcd1f9d6ba37fcbd55ade7c50c9c0cdc16607cc8380877a7f88f51ed6f1a79
SHA512

e0683e4b722ead023e3f7dae5b25e4ad713754ec35dd9567a9278f04e4039da9eb586be790e9f990bd8eb2026ed0a5b3e98eb2e9a46bad81524bbd837e2f7cf6
SSDEEP

3072:ocxM3IeN1ZA1Qs35ke4vBqLm/oud4pKbHi0KRCglbej:oAM3IeN1CQsaLimoud4MbH4hbej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff8afaa12d79687422446ed7b531986e_JaffaCakes118

Files

ff8afaa12d79687422446ed7b531986e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4a6926917d5155dae3a543504aaf460d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\urGzkubzeuUck\ykVjcjreljd\zjmvlexFcBRp.pdb

Imports

comctl32

DestroyPropertySheetPage
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetIcon
ImageList_LoadImageW

gdi32

StretchBlt
GetRgnBox
GetClipBox
SetDIBits
StartDocW
CreatePalette
Escape
PathToRegion
SetRectRgn
ExtFloodFill
SetStretchBltMode
LineDDA

shlwapi

UrlGetPartW
PathMatchSpecA

user32

GetMenuState
LoadCursorA
CreateIconFromResource
GetKeyState
GetMenuItemID
OemToCharA
GetMessageA
GetUserObjectInformationW
GetClassLongW
SendMessageA
DefDlgProcW
LockWindowUpdate
CreateDialogIndirectParamW
TabbedTextOutW
GetWindowLongA
GetDC
GetTopWindow
InvalidateRect
SetTimer
RegisterClassExA
CharUpperBuffA
GetClientRect
DefDlgProcA
PeekMessageA
MapVirtualKeyW
DrawStateW
DeleteMenu
DestroyMenu
IsDialogMessageA
ShowWindow

msvcrt

exit

ntdll

memset
strcspn

kernel32

ReadFile
lstrcmpiW
RaiseException
AddAtomA
IsDBCSLeadByteEx
LocalReAlloc
lstrlenW
CreateWaitableTimerA
GetStartupInfoA
lstrcatA
LocalFree
LCMapStringA
GetCommState
GetCompressedFileSizeW
CompareStringW
GetVersion
SetHandleCount
CreateFileA

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ldata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a6926917d5155dae3a543504aaf460d

Headers

File Characteristics

PDB Paths

Imports

comctl32

gdi32

shlwapi

user32

msvcrt

ntdll

kernel32

Sections

.text Size: 77KB - Virtual size: 76KB

.ldata Size: 2KB - Virtual size: 1KB

.data Size: 28KB - Virtual size: 32KB

.crt Size: 24KB - Virtual size: 24KB

.rdata Size: 512B - Virtual size: 372B

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 77KB - Virtual size: 76KB

.ldata
Size: 2KB - Virtual size: 1KB

.data
Size: 28KB - Virtual size: 32KB

.crt
Size: 24KB - Virtual size: 24KB

.rdata
Size: 512B - Virtual size: 372B

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 3KB - Virtual size: 2KB