45d537772b1fbfc89d54ac61d731b2b3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

45d537772b1fbfc89d54ac61d731b2b3_JaffaCakes118
Size

156KB
MD5

45d537772b1fbfc89d54ac61d731b2b3
SHA1

a34853e7bc4ddbed97e742f6c50c7c26f72ec66a
SHA256

650bfad7a4fa7e4d71924fbeac83686b5421fe51d79d970d7232ad5b012cdfda
SHA512

10a2fff95dd2187fabacbc482db3571cab6d5d32484ee4366b41d611a2b48f3820c255b92dba8c6f9d83010457980698dfa6aa91a5cdd313502fa61bde59eb9b
SSDEEP

3072:6lYta+p/8Sb/NBdlpHZ9OsuEBvhRLcW2BaNb1v6F6jj/opIqoPs:6lm7dlp59aEBvhd5N5iF6B0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d537772b1fbfc89d54ac61d731b2b3_JaffaCakes118

Files

45d537772b1fbfc89d54ac61d731b2b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

42ae992b420b04a45f8cb092b5844287

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ceafct\orSjsqbp\jRMfqGu\lrVwV.pdb

Imports

comctl32

ImageList_GetIcon
InitCommonControlsEx

kernel32

ExitProcess
CallNamedPipeW
GetTickCount
GetWindowsDirectoryW
ExitThread
lstrlenW
OpenEventW
GetConsoleWindow
EnumResourceNamesA
GetCurrentProcessId
ReadFile
RaiseException

gdi32

CreateFontA
DeleteObject
SelectObject
CreateICW
GetStockObject
Rectangle

comdlg32

PrintDlgW
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW

shlwapi

StrToInt64ExW

user32

GetUpdateRgn
PostQuitMessage
CharNextExA
CharToOemA
PostThreadMessageW
ReplyMessage
DialogBoxParamA
UnionRect
DestroyIcon
SendNotifyMessageW
SetSysColors
GetKeyboardLayoutNameA
SendMessageTimeoutW
ReleaseDC

Exports

Exports

?jrh_d___mhylij_n@@YGDPA_N@Z
?KDAGnfvyswSD@@YGPAIE@Z
?_tuhzJXngrK_A_@@YGDNG@Z
?_yatkjoo_kCH_HY@@YGDPAM@Z
?fpysbaP@@YGPAKPAEPAG@Z
?VCWM_EJCXNIP_IGF_MAN@@YGPAIF@Z
?fitof_v@@YGPAXPAID@Z
?__lWTx_x@@YGMPAK@Z
?JKNLasbwp_htQ@@YGDE@Z

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.image
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42ae992b420b04a45f8cb092b5844287

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

gdi32

comdlg32

shlwapi

user32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 53KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 31KB - Virtual size: 31KB

.rdata Size: 29KB - Virtual size: 361KB

.pdata Size: 16KB - Virtual size: 15KB

.image Size: 16KB - Virtual size: 15KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 53KB - Virtual size: 53KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 31KB - Virtual size: 31KB

.rdata
Size: 29KB - Virtual size: 361KB

.pdata
Size: 16KB - Virtual size: 15KB

.image
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 1KB