2f2661c55183b42af02b5f5f1d74d3e4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2f2661c55183b42af02b5f5f1d74d3e4_JaffaCakes118
Size

57KB
MD5

2f2661c55183b42af02b5f5f1d74d3e4
SHA1

f2c66191574a6756a231a246b09a00be4ac318e2
SHA256

92f4262d85ac95f532380317c10b11a2aa09b5c80e0185f6770f85f150ba6c72
SHA512

f68b1045cf2a5ab2aa6739ce2053906ead842ff7cc415aa66a32038eefc881bd306af60abe41eff4ef4aef90a3d5d176fe2d6c03c983bee9e59247a8e43d90a7
SSDEEP

768:zQj20vS0TJsR7fhuidhEpTBNOGoXHE1muYXLRObv0qRqVWrcIL78gCL2RWPvidzB:z/0TqK4hE5o7RCjrrFq2RQvidl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f2661c55183b42af02b5f5f1d74d3e4_JaffaCakes118

Files

2f2661c55183b42af02b5f5f1d74d3e4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0c738ae3bee2415105742cb515a0e60e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
GetParent
CharNextA
GetDesktopWindow
GetDC
TranslateMessage

kernel32

GetModuleHandleW
GetModuleHandleA
DeleteFileW
RemoveDirectoryA
SetCurrentDirectoryA
lstrcmpiA
GetTickCount
GetDriveTypeA
IsDebuggerPresent
DeleteFileA
GetCurrentProcess
GetCurrentProcessId
lstrlenW
lstrcmpiW
GetOEMCP
GetCurrentThreadId
GetCommandLineA
GetStartupInfoA
GetUserDefaultLangID
CopyFileA
MulDiv
GlobalFindAtomW
QueryPerformanceCounter
GetConsoleOutputCP
lstrlenA
GetACP
GetCurrentThread
GetWindowsDirectoryA
GetProcessHeap
lstrcmpA
GlobalFindAtomA
GetCommandLineW
GetThreadLocale
VirtualAlloc
VirtualFree

gdi32

DeleteDC
CreateSolidBrush
GetStockObject
SelectObject
GetDeviceCaps
SetMapMode
GetPixel
CreateFontIndirectA
SelectPalette
CreateCompatibleDC
RectVisible
GetTextMetricsA
PatBlt
SaveDC
GetObjectA
SetTextColor
LineTo
GetClipBox
CreatePalette
DeleteObject
SetTextAlign
CreatePen
SetStretchBltMode

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Owmvkfjj
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Hus, Nwh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c738ae3bee2415105742cb515a0e60e

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 11KB - Virtual size: 10KB

Owmvkfjj Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 25KB

Hus, Nwh Size: 512B - Virtual size: 4KB

.data Size: 102KB - Virtual size: 101KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 11KB - Virtual size: 10KB

Owmvkfjj
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 25KB

Hus, Nwh
Size: 512B - Virtual size: 4KB

.data
Size: 102KB - Virtual size: 101KB

.rsrc
Size: 27KB - Virtual size: 27KB