3bf2cc80a3c24f1bce0cf56a66f3968b_JaffaCakes118

General

Target

3bf2cc80a3c24f1bce0cf56a66f3968b_JaffaCakes118
Size

101KB
MD5

3bf2cc80a3c24f1bce0cf56a66f3968b
SHA1

40e5c6752b616f63f363857084264f0b3bd85844
SHA256

010e457f533e2e696aea20f03cddd9799de24d13002293ffcb2d41a730bb05f8
SHA512

16db5630b4b711b9b9160139ad4ffde5235a7faf466365cc0c9ae392dbb3c603fe0819802333557cb63bab2142b4615de370bfb502e426bcb85547c4c36ce4a7
SSDEEP

1536:jpAhzAVRjGEqVbVzyEqPcB/QLTlrTtgQaEUxKnZQxoQGRFe02:jqhSaV4EqPZN3tNxUxCQxoQSFe0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf2cc80a3c24f1bce0cf56a66f3968b_JaffaCakes118

Files

3bf2cc80a3c24f1bce0cf56a66f3968b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34a52909e0b3229cadab96d1395f4559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
CharNextA
GetDesktopWindow
GetSystemMetrics
GetDC
TranslateMessage

gdi32

GetClipBox
CreateSolidBrush
GetStockObject
RectVisible
CreatePalette
CreatePen
PatBlt
SaveDC
DeleteDC
SelectObject
GetDeviceCaps
SetStretchBltMode
LineTo
SetMapMode
CreateFontIndirectA
SetTextColor
SetTextAlign
SelectPalette
GetPixel
CreateCompatibleDC
DeleteObject
GetTextMetricsA
GetObjectA
GetNearestPaletteIndex
RestoreDC

kernel32

GetCurrentThreadId
SetCurrentDirectoryA
IsDebuggerPresent
RemoveDirectoryA
lstrcmpiA
GetTickCount
GetCommandLineW
GlobalFindAtomW
lstrcmpiW
GetConsoleOutputCP
CopyFileA
GlobalFindAtomA
GetProcessHeap
GetCurrentThread
GetVersion
GetCommandLineA
GetDriveTypeA
GetWindowsDirectoryA
DeleteFileA
lstrlenA
GetCurrentProcessId
lstrlenW
GetStartupInfoA
QueryPerformanceCounter
DeleteFileW
GetACP
GetModuleHandleW
GetCurrentProcess
GetThreadLocale
RemoveDirectoryW
GetModuleHandleA
GetUserDefaultLangID
ExitProcess
GetOEMCP
lstrcmpA
MulDiv
VirtualAlloc
VirtualFree

glu32

gluQuadricCallback

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34a52909e0b3229cadab96d1395f4559

Headers

File Characteristics

Imports

user32

gdi32

kernel32

glu32

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 64KB - Virtual size: 64KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 64KB - Virtual size: 64KB

.rsrc
Size: 15KB - Virtual size: 14KB