45abfcb2f244b80208ad21de402a2cff_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

45abfcb2f244b80208ad21de402a2cff_JaffaCakes118
Size

140KB
MD5

45abfcb2f244b80208ad21de402a2cff
SHA1

9c9a22c15575959cb322438dae3c7f4de16171e1
SHA256

9ef9e486282c633ab4b528d97c15158b32ae159e348022c44d56f1a207e36314
SHA512

80836e89b8b0d65c2fe7c84e93a569fb212b11aaf9092d7110e8433ff583a787bb8e68c69892be573016c0cd00fd6c0afdb2245df49fca730a08c4fd7463cc26
SSDEEP

3072:8Z5+SulzYME1BkrwsG+wiWihr9gynT3mq6Y:8ZgSulzY3s5wdir+yTWq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45abfcb2f244b80208ad21de402a2cff_JaffaCakes118

Files

45abfcb2f244b80208ad21de402a2cff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9c48e2e4fb96b3f354062b66611c5e2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\eVXytLq\gDaemJ\tkcFncA.pdb

Imports

comdlg32

GetSaveFileNameA
FindTextW
GetOpenFileNameA

gdi32

EndDoc
SetMapMode
CreateRectRgnIndirect
FillRgn
GetNearestColor
GetCurrentObject
OffsetRgn

shlwapi

StrCatBuffW
StrCmpW

user32

DrawStateW
WindowFromPoint
SetWindowTextA
GetWindowTextLengthW
GetDoubleClickTime
FrameRect
CreateDialogIndirectParamW
DefWindowProcA
KillTimer
GetMenuItemRect
wsprintfW
wvsprintfA

comctl32

ImageList_Draw
ImageList_Create

kernel32

SetCommTimeouts
FormatMessageW
LocalReAlloc
GlobalFlags
CloseHandle
lstrlenW
GetComputerNameExW
WaitForMultipleObjectsEx
GetAtomNameA
CreateThread
SetEndOfFile
lstrcatA
SetEvent

Exports

Exports

?iUFcmQojQMgOPegOzidDe@@YGPADE@Z
?sTqojoKwAmlhMkTdtKbv@@YGFIPAK@Z
?kzcxtcZLWrvrWAdqlhNg@@YGPAXPAK@Z
?uxUlKydRrXPOyx@@YGDF@Z

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c48e2e4fb96b3f354062b66611c5e2b

Headers

File Characteristics

PDB Paths

Imports

comdlg32

gdi32

shlwapi

user32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 117KB

.edata Size: 1KB - Virtual size: 1KB

.pdata Size: 9KB - Virtual size: 9KB

.xdata Size: 95KB - Virtual size: 95KB

.rsrc Size: 3KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 117KB

.edata
Size: 1KB - Virtual size: 1KB

.pdata
Size: 9KB - Virtual size: 9KB

.xdata
Size: 95KB - Virtual size: 95KB

.rsrc
Size: 3KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 2KB