3042693894186d5185a01ec1b8529a17_JaffaCakes118

General

Target

3042693894186d5185a01ec1b8529a17_JaffaCakes118
Size

129KB
MD5

3042693894186d5185a01ec1b8529a17
SHA1

ea0a5f54aee1757f9a0bab6d7eea16759711d206
SHA256

644154d7c58e576a63818fca94f4c72423c99f34a8a0f0b96bb34344b0b29445
SHA512

606bff3fe46b10bd6ab0953909bbcca88f371748b4abed9d2a14cf16460af84be21453dedf569371f866e4ebda672c1872db908a13772676981e3eb7e1c1d277
SSDEEP

3072:0OXlHBESUkl6Z6Il4t7baPQHzeiw1DAfqE52ruqJV3i:PrrlmdlO7ZT01DVA2ruqJV3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3042693894186d5185a01ec1b8529a17_JaffaCakes118

Files

3042693894186d5185a01ec1b8529a17_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ffbfe7b5bd988afefc6cc9647dab08ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\Iwurl\qoqmdup\lyylre\rlkcJu\bsCxzkG.pdb

Imports

gdi32

LineDDA
GetTextExtentExPointW
CreateRoundRectRgn
SetTextAlign
WidenPath
Ellipse
LPtoDP
GetDeviceCaps
AddFontResourceW

kernel32

lstrlenW
FindClose
TlsFree
GetVersionExW
ExitThread
CreateFileMappingA
LoadLibraryExW
GetCommModemStatus
WaitForSingleObject
LocalReAlloc
GetBinaryTypeA
GetFullPathNameA
GetACP

comctl32

ImageList_Read
ImageList_LoadImageW
CreateStatusWindowW
ImageList_Draw

user32

DragObject
RemovePropW
SetUserObjectInformationW
CheckMenuRadioItem
GetMessageW
GetScrollPos
GetKeyboardLayout
GetWindowTextLengthA
PostQuitMessage
wsprintfW
GetMenuDefaultItem
CreateDialogParamW
EnumWindows
CharToOemW

shlwapi

StrCatBuffW

Exports

Exports

?tmOsclPoMfvrSltkqZget@@YGXJN@Z
?jdxnAstBAd@@YGPAMD@Z

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffbfe7b5bd988afefc6cc9647dab08ae

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

comctl32

user32

shlwapi

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 13KB - Virtual size: 93KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 89KB - Virtual size: 89KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 13KB - Virtual size: 93KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 89KB - Virtual size: 89KB

.reloc
Size: 3KB - Virtual size: 3KB