1b70135e36208faf796fe6349ab3eec2_JaffaCakes118

General

Target

1b70135e36208faf796fe6349ab3eec2_JaffaCakes118
Size

83KB
MD5

1b70135e36208faf796fe6349ab3eec2
SHA1

8d58a3f980edaaa0e3ce16b7c39464fd7dff9f8c
SHA256

780e69f9737be53275dfb55eb7b88a14ecc462b55967dcedf835b0817c4bc99a
SHA512

4e60aa6f2f897a2d8be963c5ad121b91d34e2927d39beec78f55383fb68c05a9da1558312d58d0e64dcef34f31519adc9442598862712b696612c2cff77f9dcd
SSDEEP

1536:df0GymQ6eLUi+6F6AeZRIjv7aIqr+kWKGabkPh5pyxxdIewRaTOZBZHct8U:dsGy+eLUipeZWMWKGabSjQxInaCZnHP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b70135e36208faf796fe6349ab3eec2_JaffaCakes118

Files

1b70135e36208faf796fe6349ab3eec2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a87c2fa20825736aa3c285b67b0770b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
GetLocaleInfoW
GetTempPathA
GetCurrentProcess
FindResourceA
OpenSemaphoreW
GetEnvironmentVariableA
RtlFillMemory
CreateDirectoryA
EraseTape
DosPathToSessionPathA
ReleaseSemaphore
FindResourceExW
FindNextChangeNotification
GetFileSize
CompareStringW
GetStdHandle
GetProcAddress
VirtualAllocEx
GetModuleHandleA
GetComputerNameA
GetLastError

msvcrt

memcpy
_rmdir
system
_cexit
_ismbstrail
_CItan
_adj_fdiv_m32

winmm

midiStreamClose
mmTaskYield
mciDriverYield
midiOutCachePatches
joyGetDevCapsW
midiInGetErrorTextW
mciSetDriverData
timeGetTime

opengl32

glGetTexLevelParameteriv
glGetPixelMapfv
glRasterPos2dv
glGetMaterialfv
glColor4dv
glViewport
wglGetLayerPaletteEntries
wglDescribeLayerPlane
glMaterialiv
glPushName

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a87c2fa20825736aa3c285b67b0770b2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

winmm

opengl32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 74KB - Virtual size: 74KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 36B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 74KB - Virtual size: 74KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 36B