445791016797d28d66c33c7678b71b08_JaffaCakes118

General

Target

445791016797d28d66c33c7678b71b08_JaffaCakes118
Size

168KB
MD5

445791016797d28d66c33c7678b71b08
SHA1

d856d90dcdfd00b54ad57c84ccfbb72dcf7e9fbb
SHA256

6d98c9099935256cb6dc420e7d03783b3cf0808cd487ff7d56800784f5ef893a
SHA512

65fb0f551733f98c4f97c989930a6394f4374be910f794d4e81d508a9231baf100103df0a2b539cee0a357efbf99f5b88cc0fdd8d3542902c9ba1ce824d637f5
SSDEEP

3072:Qwl30Uz5q2d+vUMBZQgzzn2jAQ3QveTWvyeTd25cDMXAu9BTnARsgMlJqI5UwJEq:QwGuEUmye2AWCvfTdrMXx9BTAanbH+wJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
445791016797d28d66c33c7678b71b08_JaffaCakes118

Files

445791016797d28d66c33c7678b71b08_JaffaCakes118
.dll windows:4 windows x86 arch:x86

73c0dfbb0fba853cc48bfd078a6ef6e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetBkColor
GetCurrentPositionEx
GetBkMode
SetBkMode
RestoreDC
GetClipBox
CopyEnhMetaFileA
BitBlt

user32

CreatePopupMenu
CreateIcon
GetCapture
CreateMenu
GetMenu

comctl32

ImageList_GetBkColor
ImageList_Remove
ImageList_Create
ImageList_Add
ImageList_Draw
ImageList_DrawEx
ImageList_Destroy
ImageList_Write

kernel32

GetCommandLineW
VirtualFree
WideCharToMultiByte
VirtualAlloc
GlobalAlloc
LoadLibraryA

Exports

Exports

_pbTWC@16
0D7nhpa@24
_JGEcyacv9p@4
daqWcKT
__xdXd9o8Xfjs6
AeTy7
fQ_5yrGTF9@24
_rXTJ87@16
dU26uLHhZi
_0S4AksQFcCV
_iyEeFk_s
_XObP7_k
_iNbiSFlSbn
1PHKeSOoGsJ@4
Tm9RDxeFFCD
DB6GEMqCB@24
_rokU6YNDy@12
_qX004iJ@12
_SNDZWhYkDm10
K53IXhsB
lvd2LaojK2
BTPtPUW@20
_ppYL55@12
LqvX3EL53V@12
zwb0KgB

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73c0dfbb0fba853cc48bfd078a6ef6e2

Headers

File Characteristics

Imports

gdi32

user32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 161KB

.data Size: 152KB - Virtual size: 151KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 161KB

.data
Size: 152KB - Virtual size: 151KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB