2a6a920aa6e08a2972ca5dcf9dadb20c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a6a920aa6e08a2972ca5dcf9dadb20c_JaffaCakes118
Size

709KB
MD5

2a6a920aa6e08a2972ca5dcf9dadb20c
SHA1

75ccb5186d4b53308d4441dae374495ac9e19291
SHA256

51afa45b89a8914d40748b7f44c2399e809c52581ecbd0c7b45edd8491a458dc
SHA512

70cc0360d4f8a74b6ef6863d426fc1ab0ac8f587ea4490236f7df9c5b3dc5dc8b17912a7b1a9223629953f0daeedd447c07c58cf6b64d884fc0d1a79ccf120d9
SSDEEP

12288:siJy4P+54xZzC+jnM8BqyCJ7yZ5GMTTdT2/GVXYHHsyuAtlfiO:PJV/xZzXMRJ65GUTvVXYHv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a6a920aa6e08a2972ca5dcf9dadb20c_JaffaCakes118

Files

2a6a920aa6e08a2972ca5dcf9dadb20c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ecaa4f6fca5d5873cc76b37981c15345

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glColor4uiv
glColor3dv
glColor4bv

user32

IsWindowUnicode
ShowOwnedPopups
GetWindowTextLengthA
GetWindowPlacement
SetParent

kernel32

GlobalHandle
EnterCriticalSection
CreateMutexA
HeapCompact
VirtualQuery
GetModuleHandleA
GetProcAddress
VirtualAlloc
HeapFree
GetLastError
GetFullPathNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
HeapAlloc
HeapReAlloc
GetCurrentDirectoryA
GetDriveTypeA
FlushFileBuffers
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
ReadFile
SetEndOfFile
LCMapStringA
LCMapStringW

uxtheme

CloseThemeData
DrawThemeBackground
EnableThemeDialogTexture
GetThemeRect
GetThemePosition
GetThemeInt
GetThemeTextMetrics
GetThemeFilename
GetThemeFont
GetThemeSysInt
GetThemeBackgroundRegion
GetThemeTextExtent
DrawThemeIcon
GetThemePartSize
GetThemeSysBool

setupapi

SetupSetSourceListW
SetupCloseInfFile
SetupQueueRenameW

ntdsapi

DsReplicaSyncAllA

Sections

.text
Size: 680KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecaa4f6fca5d5873cc76b37981c15345

Headers

File Characteristics

Imports

opengl32

user32

kernel32

uxtheme

setupapi

ntdsapi

Sections

.text Size: 680KB - Virtual size: 680KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 152KB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 680KB - Virtual size: 680KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 152KB

.rsrc
Size: 19KB - Virtual size: 18KB