41e0f08c137cefaa32866819420d1363_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

41e0f08c137cefaa32866819420d1363_JaffaCakes118
Size

483KB
MD5

41e0f08c137cefaa32866819420d1363
SHA1

cc9d46c5bc8dddb67812ebc578388cbd15357091
SHA256

3c5ad05dbe59b091f47e27b2710f856b3c92bd94ca76c6e5e3934853fb97affc
SHA512

019fba01c962e2ba0ed238217de9edebdd5454b3b626e85dafd0041028efc2f755e4a89d0c1103d5a2d53c37e09a80369f6bdf6404da9350b0e295efe34f6e61
SSDEEP

3072:G0z3AvMh57BIqaQFgQoNHJdkGdBLNl58fVLo63R8Dk/93Y5LHzSJvz5IINZ2If3Y:yMh5tDD4cG/GVPODuCzSYIbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41e0f08c137cefaa32866819420d1363_JaffaCakes118

Files

41e0f08c137cefaa32866819420d1363_JaffaCakes118
.dll windows:4 windows x86 arch:x86

775dec764c4d4b8fb21740e33c7f6f23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

FindTextA
GetSaveFileNameA
GetFileTitleA
ChooseColorA

comctl32

ImageList_Destroy
ImageList_GetBkColor
ImageList_Add

kernel32

LoadLibraryA
VirtualAllocEx
GetStartupInfoA
GetThreadLocale
GetModuleHandleA
GetProcessHeap
ExitProcess

user32

GetSysColorBrush
GetWindowTextLengthA
SetScrollInfo
SetScrollRange
CharLowerA
SetTimer
GetWindowDC
GetMenu

Exports

Exports

_yH6uvdIB
HHRWvlLoZmcCRO@16
_h3P4A@16
pNxS1
_jcVeeHDtLg
FVu3q8hBAY@24
MnsLQ_GK7oFtL@16
EEDtX@20
_daA3vVVm@12
_qaB1r
_uipDOLKPPfba59@12
Oxn9vkJJC6D0@20
rHSs1uvo5fD8
_kuz2s@20
F3_mLqq
_MnoglFM3T@4
_uB8mV8LPQJzAU@4
_T6D7cn0l2
_YgnUnJUnn1@16
_TYv_q@12
qTdgpZa
_fjvW7rWXHA@8
_zu17M81K4T4lk
_vWAUpXimV
_vMAMEHlY
snmGCX5
LQB_MyJYq8QFS
_yLna8g@24
s36r3o_aO5oL@12
U7jxdpR
_kyZAJpcp0H0yU@24
_0eA0hGh5QHinF
_wD0HYEEO7dVQZm@8
_TsLJyGjJZ@20
_UvQk1pTLgkz@16
_KxkdEF4@16
_qTF6_ektvY3n15@16
_T4EsdIkO
_MIyizOAyptUeZ@24
ksWYhvCwy1Hq3
mqTDS
GwmxfS
wIMlCZJj
_NggOLNOn
_8b_gulQp41x@12
443stJ@16
_vQOqnDlrv@20
fgDx3@4
_rUMaZEr

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

775dec764c4d4b8fb21740e33c7f6f23

Headers

File Characteristics

Imports

comdlg32

comctl32

kernel32

user32

Exports

Exports

Sections

CODE Size: 10KB - Virtual size: 10KB

.data Size: 9KB - Virtual size: 9KB

.ihdata Size: 442KB - Virtual size: 442KB

.idata Size: 1024B - Virtual size: 724B

.thdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 10KB - Virtual size: 10KB

.data
Size: 9KB - Virtual size: 9KB

.ihdata
Size: 442KB - Virtual size: 442KB

.idata
Size: 1024B - Virtual size: 724B

.thdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB