0ec7434ac18c6a27c301fc5f1dde5e0e_JaffaCakes118

General

Target

0ec7434ac18c6a27c301fc5f1dde5e0e_JaffaCakes118
Size

168KB
MD5

0ec7434ac18c6a27c301fc5f1dde5e0e
SHA1

0ee47767e611639170c12bdff5fdddc93967f353
SHA256

15465fd4e34b58a835322e96c48e39f117963f92e997884adf458363d003708e
SHA512

be45c6adf9b66d605aabe9775a17b6f804b4bfb235f11bd8f6a8687cd9e9d0735c0793b0b9703161f8a483d32752410ea3c09c17457508a067c59a5e150e251f
SSDEEP

3072:Qwl30Uz5q2d+vUMBZQgzzn2jAQ3QveTWvyeTd25cDMXAu9BTnARsgMlJqI5UwJEq:QwGuEUmye2AWCvfTdrMXx9BTAanbH+wJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec7434ac18c6a27c301fc5f1dde5e0e_JaffaCakes118

Files

0ec7434ac18c6a27c301fc5f1dde5e0e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

73c0dfbb0fba853cc48bfd078a6ef6e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetBkColor
GetCurrentPositionEx
GetBkMode
SetBkMode
RestoreDC
GetClipBox
CopyEnhMetaFileA
BitBlt

user32

CreatePopupMenu
CreateIcon
GetCapture
CreateMenu
GetMenu

comctl32

ImageList_GetBkColor
ImageList_Remove
ImageList_Create
ImageList_Add
ImageList_Draw
ImageList_DrawEx
ImageList_Destroy
ImageList_Write

kernel32

GetCommandLineW
VirtualFree
WideCharToMultiByte
VirtualAlloc
GlobalAlloc
LoadLibraryA

Exports

Exports

_pbTWC@16
0D7nhpa@24
_JGEcyacv9p@4
daqWcKT
__xdXd9o8Xfjs6
AeTy7
fQ_5yrGTF9@24
_rXTJ87@16
dU26uLHhZi
_0S4AksQFcCV
_iyEeFk_s
_XObP7_k
_iNbiSFlSbn
1PHKeSOoGsJ@4
Tm9RDxeFFCD
DB6GEMqCB@24
_rokU6YNDy@12
_qX004iJ@12
_SNDZWhYkDm10
K53IXhsB
lvd2LaojK2
BTPtPUW@20
_ppYL55@12
LqvX3EL53V@12
zwb0KgB

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73c0dfbb0fba853cc48bfd078a6ef6e2

Headers

File Characteristics

Imports

gdi32

user32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 161KB

.data Size: 152KB - Virtual size: 151KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 161KB

.data
Size: 152KB - Virtual size: 151KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB