3f842ef7e07eb3fd615f99934556714a_JaffaCakes118

General

Target

3f842ef7e07eb3fd615f99934556714a_JaffaCakes118
Size

2.7MB
MD5

3f842ef7e07eb3fd615f99934556714a
SHA1

8216a0af8ae0dfbb3994405f4531e3a78fabbc9d
SHA256

ac1905ce8946c00351182d525d6d3cd504e0e209be29538d6af0a9b011febf25
SHA512

d41ef9660b774d9c6d32a9c5935cca228a4535ba55419bb0a05a6deefdf9d6dfbbe6029ce2a4b3d8d4987d5698014444989a989ea80453895ab5d5905923ce7f
SSDEEP

49152:fwke+K3hZBiFF+P3tn9hPLwdHDA5rwjLzpb8SGvNZGnxsYAPwG6qHlAMQJC:vKRZBi4dnXPL+gcjXpb8SGlZ2nAPwG6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f842ef7e07eb3fd615f99934556714a_JaffaCakes118

Files

3f842ef7e07eb3fd615f99934556714a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

938ab8e0c80a581740ea0d79a7cac49f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\fxneskek\dHmyzO\iqNdx.pdb

Imports

user32

GetDoubleClickTime
InSendMessage
LookupIconIdFromDirectory
VkKeyScanW
IsChild
RegisterClassW
FrameRect
GetScrollInfo
DrawFocusRect
GetKeyboardType
GetMessageTime
IsDialogMessageW
IsCharAlphaNumericA
CreateCursor

kernel32

DisconnectNamedPipe
LocalSize
lstrcpynW
SearchPathW
CreatePipe
CreateFileMappingW
HeapValidate
GlobalFlags
GetModuleHandleA
SetThreadExecutionState
WaitForSingleObject
GetCurrentThread

gdi32

CreatePatternBrush
MoveToEx
ExtTextOutW
GetTextMetricsA
CreateCompatibleBitmap
CreateDIBSection
CreateFontIndirectA
GetNearestPaletteIndex
TranslateCharsetInfo

shlwapi

StrCmpIW

Exports

Exports

?XzdwnxstJtncqd@@YGXPAF@Z
?_MesifssPgpzksIerkj@@YGJPADH@Z
?HonqkleIRuefxvNAhoh@@YGPADPAF@Z
?PemcqrpgrenMm@@YGHDM@Z
?Bcysqtqwxlrohjykalt@@YGPAEPAJ@Z
?WnqypJosRpxECbp@@YGJPAJ@Z

Sections

.itext
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

938ab8e0c80a581740ea0d79a7cac49f

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

gdi32

shlwapi

Exports

Exports

Sections

.itext Size: 21KB - Virtual size: 21KB

.text Size: 6KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 6.9MB

.rsrc Size: 2.7MB - Virtual size: 2.7MB

.reloc Size: 2KB - Virtual size: 1KB

.itext
Size: 21KB - Virtual size: 21KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 6.9MB

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

.reloc
Size: 2KB - Virtual size: 1KB