36f9172cb1d3b65f9c7cd522f112c609_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

36f9172cb1d3b65f9c7cd522f112c609_JaffaCakes118
Size

192KB
MD5

36f9172cb1d3b65f9c7cd522f112c609
SHA1

9110943c505057abf29ca0ac567bf4743c778226
SHA256

e0c8c14ac91007e8895d2965648a3c36e81286d74a7749114b60f9686e9340df
SHA512

f5d729b9e9acb8d32f34e4df30e0e8e38804b73263bdf34b6397c73234c9e654d12cc383fa0425c0f86a9a9f03f1084d768e1bd47d710fcbfa617cf95fe5c902
SSDEEP

3072:QAvp/kF5DzcFYgqrGUX69qQvovAZEdGsiSU/VF7nWuMEaY5HzHJ1S9DYzLia5:XR/kjzc7flvoviEdG1FKupj5XgD3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36f9172cb1d3b65f9c7cd522f112c609_JaffaCakes118

Files

36f9172cb1d3b65f9c7cd522f112c609_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aceb59d6ea0573309ee85de96416f9cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Life\Ball\Box\Flower.exe

Imports

kernel32

GetFileSize
EnumResourceTypesA
ClearCommBreak
GlobalAlloc
UnlockFile
ReadFile
HeapCreate
SearchPathA

user32

RegisterClassA
GetKeyboardType
PostMessageW
TranslateMessage
DlgDirSelectComboBoxExA
GetDlgItemInt
GetKeyboardLayoutList
WindowFromPoint
SetCursor
MonitorFromPoint
GetMenuItemRect
CharNextW
SetScrollInfo
CreateWindowExA
GetSystemMetrics
LookupIconIdFromDirectory
AttachThreadInput
GetKeyState
IsCharAlphaA
SendNotifyMessageW
ArrangeIconicWindows
GetActiveWindow
GrayStringW
IsCharAlphaW

gdi32

SetWindowExtEx
CreateFontIndirectA
GetTextExtentExPointW
TextOutW
CreateRectRgnIndirect
CreateFontIndirectW
DPtoLP
SaveDC
SetDIBits
GetStockObject

atl

AtlAxCreateControl
AtlAxCreateControlEx

shlwapi

PathFileExistsW

Exports

Exports

_FfgdjhjfghghjlkfUJfkjfdjkgjkfjkgfJfkd@0
_GetClassInfoAGetClassInfoAGetClassInfoAGetClassInfoA@0

Sections

.dedrde
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vggh
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wqew
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ereffv
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdgdfs
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aceb59d6ea0573309ee85de96416f9cb

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

atl

shlwapi

Exports

Exports

Sections

.dedrde Size: 1KB - Virtual size: 1KB

.text Size: 137KB - Virtual size: 136KB

.vggh Size: 512B - Virtual size: 64B

.wqew Size: 512B - Virtual size: 171B

.ereffv Size: 512B - Virtual size: 64B

.fdgdfs Size: 512B - Virtual size: 64B

.data Size: 26KB - Virtual size: 25KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 2KB - Virtual size: 1KB

.dedrde
Size: 1KB - Virtual size: 1KB

.text
Size: 137KB - Virtual size: 136KB

.vggh
Size: 512B - Virtual size: 64B

.wqew
Size: 512B - Virtual size: 171B

.ereffv
Size: 512B - Virtual size: 64B

.fdgdfs
Size: 512B - Virtual size: 64B

.data
Size: 26KB - Virtual size: 25KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 2KB - Virtual size: 1KB