010363f89951b102e1806faac25a9d7c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

010363f89951b102e1806faac25a9d7c_JaffaCakes118
Size

121KB
MD5

010363f89951b102e1806faac25a9d7c
SHA1

1d8efa1828b8369f520aba6758e8ffd4a86c21f0
SHA256

cebf490e00273322aa1d5e6793baaecab856d74fecd31e3ce98033d30d342f14
SHA512

a1b9a35673dfd2c7640e6da0e82b49107b5de7f2595044668da374e63432e1260c986538624dfa35b6377dcc42d17d7a021b2268ad4db0b44901e728ad0874f8
SSDEEP

3072:F9sj8BQTIeUsX0plzXZBUGD0PvyGS1hGSm1qW8he:zsj8+sxM0fp4P6eSBh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
010363f89951b102e1806faac25a9d7c_JaffaCakes118

Files

010363f89951b102e1806faac25a9d7c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c574348df4832c76c9597879cfec6c36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\zqlnroZk\zwpqbz\zgge.pdb

Imports

gdi32

GetCharWidth32W
ExtFloodFill
SetBrushOrgEx
CreateDIBSection
EnumFontsW
Polyline

user32

DialogBoxParamW
GetDesktopWindow
MonitorFromRect
IsChild
OpenIcon
GetTopWindow
MapVirtualKeyW
ShowWindow
WaitMessage
MessageBoxExW
DestroyCaret
LoadIconW
UpdateWindow
GetScrollPos

comdlg32

GetOpenFileNameW
PrintDlgExW
GetSaveFileNameW

comctl32

ImageList_AddMasked
CreateStatusWindowW

kernel32

lstrcatW
LCMapStringW
GetCurrentThread
lstrcmpiA
lstrlenA
ExitProcess
GetShortPathNameW
FindResourceA
FoldStringW
VerSetConditionMask

Exports

Exports

?__RJQ__G@@YGPA_NPAK@Z
?hs_UJIC_XFGjblI@@YGDPADPAE@Z
?PLTPB_ADK_GdhoaG_PL@@YGKJN@Z
?J_DMYFb_vrwyMXSNH_NKLR@@YGKPAH@Z
?MZdf_iBCR_bjmAZ_CTIB@@YGPAXPAHPAK@Z
?_toY_SNJVMH_WBHWZA@@YGM_ND@Z
?fjzqxpnb__u_yIE_lfyxri@@YGPA_NPAD@Z
?tjv_zSJUBNQM@@YGPADIK@Z
?kvNpvldq@@YGPAIKM@Z
?wcaXY_FORX@@YGPAEIF@Z
?MTY_ZIXDBDIIde_uuz@@YGPADKPAN@Z

Sections

.text
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c574348df4832c76c9597879cfec6c36

Headers

File Characteristics

PDB Paths

Imports

gdi32

user32

comdlg32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 160B

.code Size: 23KB - Virtual size: 22KB

.data Size: 3KB - Virtual size: 335KB

.edata Size: 1KB - Virtual size: 1KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 160B

.code
Size: 23KB - Virtual size: 22KB

.data
Size: 3KB - Virtual size: 335KB

.edata
Size: 1KB - Virtual size: 1KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB