108216ff7958cd8a8b5df35bda034374_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

108216ff7958cd8a8b5df35bda034374_JaffaCakes118
Size

154KB
MD5

108216ff7958cd8a8b5df35bda034374
SHA1

ae2ba42b78b13168f1ba661e1f6ef28927c68cd3
SHA256

bc83a24053ea146fa38c676be6009efa87f7d2ed49ac098c8f396e33791dffbc
SHA512

80a7f96310c405406adc45083b3e6200630c97695a0d90a75a82cfe29ddcf1042ee81800524268f9ec5cb84acd76bd2db19a040e181430de32b55feee83998e0
SSDEEP

3072:bjNwHd65z8GOtURDDGDIF+QTyWoXh9PVzNTypPEVfNh1szf/sS:bBlzNO2RmgTgjdc2fur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108216ff7958cd8a8b5df35bda034374_JaffaCakes118

Files

108216ff7958cd8a8b5df35bda034374_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c4758c21a1e7e8737ac6d0bdcfd53d33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\mXnbducw\yolgjpJm\bvDczkqr.pdb

Imports

user32

DestroyWindow
CharLowerBuffW
LoadIconW
GetDlgItem
GetKeyNameTextW
LoadIconA
IsWindow
WaitMessage
DestroyMenu
SetClassLongW
CharUpperA
GetSystemMetrics
FillRect

shlwapi

StrToIntW
UrlGetPartA

comdlg32

PrintDlgExW
FindTextW

kernel32

GetSystemTimeAsFileTime
GetWindowsDirectoryA
CreateFileMappingA
GetComputerNameW
SetWaitableTimer
lstrcmpA
IsDBCSLeadByteEx

gdi32

GetDeviceCaps
RestoreDC
RectInRegion
CreatePalette
ResizePalette
SetLayout

Exports

Exports

?g_rhetqcsfrf_nnboui@@YGEH@Z
?fhjpvOGZjm@@YGEPAMF@Z
?ke_esqjhip_bYDETCNZ@@YGFI@Z

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ