3aa1ff198483b042db4669a988efa6ff_JaffaCakes118

General

Target

3aa1ff198483b042db4669a988efa6ff_JaffaCakes118
Size

117KB
MD5

3aa1ff198483b042db4669a988efa6ff
SHA1

ff52148d10ebf6718fb9ec756179f16545d51cf7
SHA256

0e914900c053de0189e008bb1b718bc68123470b822b117bf18bb5d7a557362f
SHA512

b59edcfaa8208fefb7aa67a6e306a588c01e7cb91e26621f4c97b2708c58ac18bb26c5b7242edc56d8292edbeec42738b53de5866e702b3a2802be4aa7e9456f
SSDEEP

1536:yva8EI3yYcjCWjolGH1KTzGN80sE02K6rDlTs+mA6ctK7ddZ54bcU6tRNKLte8CV:KACWITd0F02K6XlTs+Lu7PZ5keysJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aa1ff198483b042db4669a988efa6ff_JaffaCakes118

Files

3aa1ff198483b042db4669a988efa6ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1cfc5aa478151354d343331a542b9e4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetDesktopWindow
GetSystemMetrics
GetParent
TranslateMessage

gdi32

SetMapMode
CreatePalette
CreatePen
DeleteDC
SetStretchBltMode
CreateCompatibleDC
RestoreDC
SetTextColor
LineTo
DeleteObject
GetStockObject
GetTextMetricsA
RectVisible
SelectPalette
GetPixel
GetDeviceCaps
GetClipBox
CreateSolidBrush
CreateFontIndirectA
GetObjectA
SaveDC
SelectObject
PatBlt
SetTextAlign
SetPixel

kernel32

QueryPerformanceCounter
GetThreadLocale
GetModuleHandleW
lstrlenA
GetUserDefaultLangID
MulDiv
GetProcessHeap
RemoveDirectoryA
GetCommandLineA
GetCurrentThread
DeleteFileW
VirtualAlloc
lstrcmpiA
GetStartupInfoA
DeleteFileA
GlobalFindAtomW
VirtualFree
GetCurrentThreadId
GetCommandLineW
GetCurrentProcessId
GetDriveTypeA
GetACP
CopyFileA
lstrlenW
IsDebuggerPresent
GetOEMCP
SetCurrentDirectoryA
GetCurrentProcess
GlobalFindAtomA
lstrcmpiW
GetConsoleOutputCP
GetVersion
GetTickCount
GetWindowsDirectoryA
lstrcmpA
GetModuleHandleA
RemoveDirectoryW

glu32

gluQuadricCallback

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1cfc5aa478151354d343331a542b9e4a

Headers

File Characteristics

Imports

user32

gdi32

kernel32

glu32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 78KB - Virtual size: 78KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 78KB - Virtual size: 78KB

.rsrc
Size: 16KB - Virtual size: 16KB