21f08a858941108d79c9075038fb844b_JaffaCakes118

General

Target

21f08a858941108d79c9075038fb844b_JaffaCakes118
Size

115KB
MD5

21f08a858941108d79c9075038fb844b
SHA1

4a6529280e0c888542c7accca91b61c74269b86d
SHA256

2ed946cbd306c99f0ccdc1991a20db3611c8ebde7de175d2a06120ed9c306ce1
SHA512

42bbd9005d923205c5bb5d125927f8fb1549cdb4e9d719cc86edc9af4848fd2bf35f8657d18eb1afc307278bd8c3615375b08c2deaa196e93c24b7aecf528349
SSDEEP

3072:x/ZxUisP/GfzyPCD2b3wY1lR2njmGyiq2H:BUl/GfeqD2b3wGRMfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f08a858941108d79c9075038fb844b_JaffaCakes118

Files

21f08a858941108d79c9075038fb844b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ee9c0d776d6ddc8e249a39d59df9b6cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetUserDefaultLangID
GetModuleHandleA
GetConsoleOutputCP
SetCurrentDirectoryA
GetThreadLocale
GetWindowsDirectoryA
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
lstrcmpA
IsDebuggerPresent
GetTickCount
lstrcmpiW
GetDriveTypeA
MulDiv
GetModuleHandleW
GetCurrentProcess
GetOEMCP
GetCurrentThreadId
GetCurrentThread
lstrlenW
DeleteFileA
GetProcessHeap
DeleteFileW
lstrcmpiA
GlobalFindAtomW
lstrlenA
CopyFileA
VirtualAlloc
VirtualFree
GetVersion
RemoveDirectoryA
GlobalFindAtomA
GetACP
RemoveDirectoryW
GetCommandLineW

gdi32

GetStockObject
SetTextColor
SetMapMode
CreateSolidBrush
CreateCompatibleDC
SetStretchBltMode
SaveDC
CreatePalette
PatBlt
SelectPalette
SelectObject
GetObjectA
LineTo
GetTextMetricsA
SetTextAlign
DeleteDC
GetClipBox
CreatePen
GetDeviceCaps
DeleteObject
GetPixel
CreateFontIndirectA
RestoreDC
RectVisible
SetPixel

user32

TranslateMessage
GetSystemMetrics
CharNextA
GetParent
GetDesktopWindow

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee9c0d776d6ddc8e249a39d59df9b6cd

Headers

File Characteristics

Imports

kernel32

gdi32

user32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 80KB - Virtual size: 79KB

.rsrc Size: 14KB - Virtual size: 14KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 14KB - Virtual size: 14KB