3705cc2935a43d140d20f1d8ec41a9bb_JaffaCakes118

General

Target

3705cc2935a43d140d20f1d8ec41a9bb_JaffaCakes118
Size

186KB
MD5

3705cc2935a43d140d20f1d8ec41a9bb
SHA1

1b1a4088266bbf840ee363dead9524c883757998
SHA256

bceb901a7c5b5e9ddbf2d74a5da4cbcf73c44c2d4bde6749cee8c4d53f38e775
SHA512

13e5bd039ea0a54d2719f496acbf177f524c82236f5b42b4cc1d7adb0166d577274f59250637485082a2d623298dfa7a83b930307b2f72392b8a9189e007535f
SSDEEP

3072:0n6vBEEvERgS1z1/rUP44bqPvtiFEoZkz8sCPUqHVQ1OWHkRqi/3HuNGRFIcqEI1:csrWm44WPKEL8sC8qHq1OWHi/39RCcbS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3705cc2935a43d140d20f1d8ec41a9bb_JaffaCakes118

Files

3705cc2935a43d140d20f1d8ec41a9bb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cea3f722565a31cd7305bfedc3adc0e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_vsnwprintf
__set_app_type
__wgetmainargs
__p__commode
??2@YAPAXI@Z
_initterm

kernel32

ExitProcess
SetThreadPriority
CompareStringA
WideCharToMultiByte
GetCurrentProcess
GlobalLock
GetTempPathW
HeapFree
HeapCreate
UnmapViewOfFile
FlushFileBuffers
GetTickCount
InterlockedDecrement
IsBadCodePtr
GetModuleFileNameA
DeleteCriticalSection
OutputDebugStringA
GetStringTypeW
HeapSize
InitializeCriticalSection
FreeLibrary
GetFileSize
LoadResource
LoadLibraryW
TlsSetValue
GetCurrentThreadId
GetVersionExW
VirtualAlloc
GetProcAddress
InterlockedIncrement
LCMapStringA
EnterCriticalSection
SizeofResource
FindNextFileW

user32

WindowFromPoint
ScreenToClient
CharNextA
MessageBoxA
GetDlgItemTextW
InvalidateRect
SetFocus
DefWindowProcA
GetWindowLongA
ReleaseDC
MoveWindow
GetSysColor
DrawIconEx
DestroyMenu
IsWindow
KillTimer
GetDC

opengl32

glPushMatrix

gdi32

GetPixel
CreateFontIndirectA
CreateDIBitmap
RealizePalette

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cea3f722565a31cd7305bfedc3adc0e3

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

opengl32

gdi32

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 13KB - Virtual size: 24KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 13KB - Virtual size: 24KB

.rsrc
Size: 2KB - Virtual size: 2KB