0f9b1a6d76ca97bfdcf7a1e8fd504ab7_JaffaCakes118

General

Target

0f9b1a6d76ca97bfdcf7a1e8fd504ab7_JaffaCakes118
Size

127KB
MD5

0f9b1a6d76ca97bfdcf7a1e8fd504ab7
SHA1

a2d8faec9e784a8a8f478866901b482be2b2b7ae
SHA256

852fcac0f328edf2676bd72c83858fb80812c509bec1dc2b615126e95b052818
SHA512

d62a3726bcc39941870946970449f5a725e132a14280c8b740acd8759c9921251df7decbdf8c2a6337b40374156d231fefd0c0d0ad1e357d2c4346de606375ad
SSDEEP

3072:pEOhKfiJ9hUKrm4MU7k44MbZnY92kto7/YV75YPj16jIcQ1:psfQxT44HZng2Oo7+7C7Aa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9b1a6d76ca97bfdcf7a1e8fd504ab7_JaffaCakes118

Files

0f9b1a6d76ca97bfdcf7a1e8fd504ab7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4228e81b0e96c3a69482c4b1849640b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\doFrzdzA\KXot\cdvayIe.pdb

Imports

shlwapi

PathGetArgsW
StrCatBuffW

kernel32

CancelWaitableTimer
HeapValidate
GetComputerNameA
GetCommProperties
WaitForSingleObjectEx
lstrlenW
DeleteFileA
GetTimeFormatA
FileTimeToDosDateTime
GetFileSize
GetTempFileNameA
TlsSetValue

user32

FindWindowW
GetScrollRange
RegisterHotKey
AdjustWindowRect
AppendMenuA
wsprintfW
CreateDialogParamA
CreateDialogParamW
EndMenu
GetNextDlgTabItem
SetScrollPos
CreatePopupMenu
SystemParametersInfoW

gdi32

CreateHatchBrush
Polyline
SetDIBColorTable
SetDIBitsToDevice
RectInRegion
SaveDC
GetTextExtentExPointW

Exports

Exports

?kHtBeCwNtnvVrtjUY@@YGXM@Z
?wsknxFelTawYxxgmwvpev@@YGXK@Z
?fvslouThbzzbVapUivzuu@@YGDJJ@Z
?fbFldqisqto@@YGXK@Z
?jktpilBtr@@YGPAFJPAD@Z
?amjxxyLUbBglfunZYsqffJ@@YGPAFKG@Z
?PNvqiwdjiyerddUxdX@@YGPAEI@Z

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4228e81b0e96c3a69482c4b1849640b0

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.edata Size: 1KB - Virtual size: 1KB

.data Size: 6KB - Virtual size: 10KB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 42KB - Virtual size: 42KB

.edata
Size: 1KB - Virtual size: 1KB

.data
Size: 6KB - Virtual size: 10KB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 5KB - Virtual size: 4KB