365fda8cf9ba2a08f1460d6bde90160a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

365fda8cf9ba2a08f1460d6bde90160a_JaffaCakes118
Size

551KB
MD5

365fda8cf9ba2a08f1460d6bde90160a
SHA1

9864673cb3ac2bf041090c55dab264a52bcd17d7
SHA256

ffa6c3b5de85e8a2ee03ddaf8eacef65a2dc8e61b9efbd4f67eaa1df4cd20399
SHA512

39c2264123438853abdfae9c96f99f4f0d6eb69df3388201bd7820ebbc15292aa92e38bd040ad6ce914906df7a99f7ae39f5d772dda130b7e8bda8a1d5a332a9
SSDEEP

12288:LBhhvwCCS2a8IJoO+TvHhqM5Ff3zWBN33xTihj7dYf5:LPd7evHhqM5Ff3zMRiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
365fda8cf9ba2a08f1460d6bde90160a_JaffaCakes118

Files

365fda8cf9ba2a08f1460d6bde90160a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4384cf6aee2533bad8b02dc20c9d5298

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glFinish
glRasterPos2dv
glEvalCoord1dv
glRasterPos3i
glEvalPoint1
glClearIndex
glMapGrid1d
glLighti

gdi32

DeleteObject
CreateFontA
CreateDiscardableBitmap
GetBkColor
GetBkMode

comctl32

UninitializeFlatSB
CreateToolbarEx
ord16
ord6
ord8
ord5

shlwapi

StrStrA
StrChrW

kernel32

GetModuleHandleA
GetProcAddress
VirtualAllocEx
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

winspool.drv

ConfigurePortA
EnumPrintersA
DeletePrinterDriverW

usp10

ScriptJustify
ScriptCPtoX
ScriptGetLogicalWidths
ScriptStringValidate
ScriptFreeCache
ScriptStringAnalyse
ScriptIsComplex
ScriptItemize
ScriptStringGetOrder
ScriptBreak
ScriptGetGlyphABCWidth
ScriptStringFree
ScriptCacheGetHeight
ScriptShape

odbc32

ord60

Sections

.text
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4384cf6aee2533bad8b02dc20c9d5298

Headers

File Characteristics

Imports

opengl32

gdi32

comctl32

shlwapi

kernel32

winspool.drv

usp10

odbc32

Sections

.text Size: 511KB - Virtual size: 511KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 306KB

.rsrc Size: 33KB - Virtual size: 32KB

.text
Size: 511KB - Virtual size: 511KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 306KB

.rsrc
Size: 33KB - Virtual size: 32KB