0e8fcf3bf037b4a11e6befec47cdeab0_JaffaCakes118

General

Target

0e8fcf3bf037b4a11e6befec47cdeab0_JaffaCakes118
Size

182KB
MD5

0e8fcf3bf037b4a11e6befec47cdeab0
SHA1

1245b51b8b4e5ebfc3602f863b1cf595f18de7a5
SHA256

25920fa23079e156b42ccd19932468fbdc17004c7d3e63fd06dedce37caf741f
SHA512

5267954156d3165cd734aa52a1c8b2bbd87af0db599baa834c14790d1ebf4d71c6235807a852b6f8653f01effc8c0e4c1c106f6275eca16640422bb405f26462
SSDEEP

3072:T4dS5r0PU6VgQC7abua7yFvDP3M1vER54VIauE1VIrS5855ssvHasbzKtLsKCaG6:TeScgQCWbluFjivER54GauOWA8HdbzcL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e8fcf3bf037b4a11e6befec47cdeab0_JaffaCakes118

Files

0e8fcf3bf037b4a11e6befec47cdeab0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

30022c6fdaa29fd9b4c1322cc598d2a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
DuplicateHandle
CloseHandle
GetModuleHandleA
InitializeCriticalSection
GetConsoleCP
TerminateProcess
CreateEventW
GetCurrentProcessId
MoveFileExW
TlsAlloc
GetWindowsDirectoryA
Sleep
GetStringTypeW
GetCommandLineA
LoadLibraryExW
FreeLibrary
GetLastError
MultiByteToWideChar
SetUnhandledExceptionFilter
LCMapStringW
GetEnvironmentStringsW
GetACP
LocalAlloc
InterlockedDecrement
GetStdHandle
GetLocaleInfoA
GetCurrentProcess
HeapAlloc
GetShortPathNameA
VirtualAlloc
GetTimeZoneInformation
GetFileType
lstrcpynA
GetLocalTime
lstrcmpA
GlobalFree

user32

ShowWindow
PtInRect
EndDialog
UnhookWindowsHookEx
IsWindowVisible
MessageBoxW
BeginPaint
CreateWindowExW

msvcrt

?terminate@@YAXXZ
??1exception@@UAE@XZ
_XcptFilter
malloc
__set_app_type
atoi

gdi32

SetROP2
LPtoDP

opengl32

glRotatef

shell32

SHGetMalloc

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30022c6fdaa29fd9b4c1322cc598d2a3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

gdi32

opengl32

shell32

Sections

.text Size: 114KB - Virtual size: 113KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 6KB - Virtual size: 20KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 6KB - Virtual size: 20KB

.rsrc
Size: 2KB - Virtual size: 2KB