35440c422b902f2dba13ae74fc632e6f_JaffaCakes118

General

Target

35440c422b902f2dba13ae74fc632e6f_JaffaCakes118
Size

113KB
MD5

35440c422b902f2dba13ae74fc632e6f
SHA1

bb4578669c8fe29eabff152e994664d8337ae80a
SHA256

3ec2ad4958a42177bcec605e342b624802bb9a02acc7243aff0031269f54d4f3
SHA512

b936fa0ed5ae4bd71a8a6928aee78985910960802ac32cce32f45b29cc78dfdb4e11f6ade3b26133c619af68ebddfcfc3afba1ae1c1c9a8d01d5bea8619dc45b
SSDEEP

3072:HJOI+2C6jTWptU6ePgjJ6SQkl4+HAmY/D9:l+oWptU6exSzVgmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35440c422b902f2dba13ae74fc632e6f_JaffaCakes118

Files

35440c422b902f2dba13ae74fc632e6f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b8c9ad7f76582b579d846e454dbd2d3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
GetCurrentThreadId
lstrcmpiA
GetStartupInfoA
GlobalFindAtomA
RemoveDirectoryA
GetCurrentProcess
GetACP
GetWindowsDirectoryA
GetCommandLineW
GetModuleHandleA
MulDiv
GlobalFindAtomW
CopyFileA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
DeleteFileA
IsDebuggerPresent
GetDriveTypeA
GetProcessHeap
lstrlenA
GetUserDefaultLangID
GetModuleHandleW
lstrcmpiW
GetVersion
SetCurrentDirectoryA
RemoveDirectoryW
GetCurrentThread
lstrcmpA
GetThreadLocale
GetCommandLineA
GetOEMCP
GetConsoleOutputCP
DeleteFileW
VirtualAlloc
VirtualFree

user32

TranslateMessage
GetSystemMetrics
GetDesktopWindow
GetParent
CharNextA

gdi32

SetStretchBltMode
SelectObject
SelectPalette
SaveDC
SetTextAlign
DeleteDC
CreateCompatibleDC
GetPixel
CreateFontIndirectA
LineTo
GetClipBox
GetDeviceCaps
CreateSolidBrush
GetStockObject
CreatePalette
SetTextColor
RectVisible
CreatePen
GetTextMetricsA
DeleteObject
RestoreDC
GetObjectA
SetPixel
SetMapMode
PatBlt

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8c9ad7f76582b579d846e454dbd2d3a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 80KB - Virtual size: 79KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 12KB - Virtual size: 12KB