28e13bfb6ac217eef21b1d7c7de27aeb_JaffaCakes118

General

Target

28e13bfb6ac217eef21b1d7c7de27aeb_JaffaCakes118
Size

168KB
MD5

28e13bfb6ac217eef21b1d7c7de27aeb
SHA1

ad8f0a84c8c7dfad0463d6bf13311ef73077eb70
SHA256

6883e3780bdd70dc0e57df13cd2ed36cd59e7d5372a396ab7e2c2b07b790d31c
SHA512

71fd675b9d3e58f78cdae96edcafade18a170fca05d865fd554179604c245525f6d92f69628b0d7fac244c7dcd803c716085b03d4d11d33894b47e0b72a4e1c9
SSDEEP

3072:k1IM6ptoGzKtuNMSL1KyY6cDcw6IKPhjoXfhFYex1j2UuZiVeqUL4vlX5h3sqm:wITtzc8xt1PmXfrbl2dqUMvl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28e13bfb6ac217eef21b1d7c7de27aeb_JaffaCakes118

Files

28e13bfb6ac217eef21b1d7c7de27aeb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Write
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_Remove
ImageList_Draw

gdi32

GetDIBColorTable
CreateDIBitmap

user32

GetCursor
OpenIcon
GetClientRect
GetClipboardData
GetCursorPos
GetMenu
DrawMenuBar
GetDC

kernel32

VirtualAlloc
ReadFile
GetModuleHandleA
LoadLibraryA
SetEndOfFile
GetLastError
ResetEvent
ExitProcess

Exports

Exports

UYS3Zdz67@24
BwEO5d
_oiPxl37Yg@16
_07aJGH@8
_cTzcbZDl
cihl3DJrW1Ge
_fw3qEh3A
_RUJ5N
LsERixT58no8Y
_6ZOTxx2u0x
_cT90GypzD3W@24
_clEQfN6ibVY8U
_IqhP3CPp@16
124EIM@20
DHjC2tq@8
_Zo9wLjajXExH9
05TUiBVj
_SWA6DoceDk@24
DUvhlIWEgxJpJS@4
OEjcY98GT@8
_tXRTxmXrGnsbc@20
t_GKzV1qXOQQxm
s702xPvTqJMAfn@8
8LDtqD
_UjMcbLXsOQP@20
jMuCr7v7@16

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

Imports

comctl32

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 182KB

.data Size: 148KB - Virtual size: 148KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 182KB

.data
Size: 148KB - Virtual size: 148KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB