9fb247887f15906abb73ccc859e097cb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9fb247887f15906abb73ccc859e097cb_JaffaCakes118
Size

55KB
MD5

9fb247887f15906abb73ccc859e097cb
SHA1

871df6992cc1261fb8d49f879b2ed3d9e3553b18
SHA256

91bd1cfe56711c7b2ddad40b93cb65a32fe90d3c2c374dd0e930f41f2ad84e0a
SHA512

c8044125838b21be6d7a339b62cd3874a0512c2f6614cd7cde1408a50ca8e9e2e9517369065f39c44619a965b91a73fac42bf2f713cfbf63f6ed2541e1cd7cff
SSDEEP

768:WK4gbX4Ep5JKDBsNM8rcQEoM1xOPmazd0xqDmfq3hETHutwPQ3Y3xOvJ8OVP:0gbXzp5esAdl1Ezd0nfq3hE6tSwFq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fb247887f15906abb73ccc859e097cb_JaffaCakes118

Files

9fb247887f15906abb73ccc859e097cb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a2dcb62e3fbc57941336c83fbfb9c5b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\nbqN\cohLx\ooDxWv.pdb

Imports

user32

wsprintfW
EndPaint
DefDlgProcW
SetDlgItemTextA
CharPrevW
AdjustWindowRect
ClientToScreen
EnumWindows
DestroyCursor
UpdateWindow
GetForegroundWindow
IsWindowUnicode
DefWindowProcA
CreateCursor

shlwapi

PathGetArgsW

comctl32

DestroyPropertySheetPage
ImageList_AddMasked
ImageList_Destroy
PropertySheetW

kernel32

DisconnectNamedPipe
SetThreadPriority
GetFullPathNameA
WaitForSingleObject
GetThreadTimes
OpenEventW
DeleteCriticalSection
IsBadCodePtr
InterlockedExchangeAdd
IsValidLanguageGroup
GetVersion
LeaveCriticalSection
LockResource
GetDateFormatA

gdi32

ExtTextOutA
CreateBrushIndirect
RoundRect
CreateFontW
ExcludeClipRect
GetTextColor
OffsetViewportOrgEx
SetBrushOrgEx

Exports

Exports

?SEdjvbruQPLtpxnmf@@YGXPAMPA_N@Z
?RDzdAvNdpxe@@YGEM@Z
?udyNKlwGjonegV@@YGHPAN@Z
?yOmdrlcBsktavNyhozc@@YGKHF@Z
?zuzjANb@@YG_NPAJPAH@Z
?rkiofqHCdxBnKtj@@YGXPAID@Z
?McGhuIrBSszlVsrYCyAxY@@YGGKF@Z

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2dcb62e3fbc57941336c83fbfb9c5b7

Headers

File Characteristics

PDB Paths

Imports

user32

shlwapi

comctl32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.itext Size: 512B - Virtual size: 184B

.data Size: 2KB - Virtual size: 190KB

.rdata Size: 3KB - Virtual size: 3KB

.import Size: 2KB - Virtual size: 1KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.itext
Size: 512B - Virtual size: 184B

.data
Size: 2KB - Virtual size: 190KB

.rdata
Size: 3KB - Virtual size: 3KB

.import
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 1KB - Virtual size: 1KB