41143fc63a07ec98c0841ec61fcbece2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

41143fc63a07ec98c0841ec61fcbece2_JaffaCakes118
Size

167KB
MD5

41143fc63a07ec98c0841ec61fcbece2
SHA1

6df883d8e40079ff3a267dc28df0946fa9bbaf91
SHA256

c89a9b78fd99d89f3c4428ee632c5d0374ec414fb29162058fc2790c255d9334
SHA512

b699a7ab6ef77c0f55c22c22caf509477acaa082dd344b2cb26064f7696898360f348e43a0dc9777d958105eaaebbc3db92db7f68346c7d5cdb867a820c9404a
SSDEEP

1536:AxGaUQyyDMTdn6UFuE6uzCn2FNEknAswb4ufqVHWLUfbGxpkwE2mSRzWdCTnDd+I:AOOqcNExzqDkn7Y4FWCyLdYSgcgWFt+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41143fc63a07ec98c0841ec61fcbece2_JaffaCakes118

Files

41143fc63a07ec98c0841ec61fcbece2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aedb22b1655243a0de8ecc4a50456061

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePalette
SetMapMode
GetObjectA
GetPixel
DeleteDC
SetTextColor
GetClipBox
SetTextAlign
DeleteObject
CreatePen
SaveDC
SelectObject
RestoreDC
PatBlt
GetTextMetricsA
GetStockObject
LineTo
CreateSolidBrush
SelectPalette
CreateFontIndirectA
RectVisible
CreateCompatibleDC
SetStretchBltMode
GetDeviceCaps

user32

GetDesktopWindow
CharNextA
GetParent
TranslateMessage
GetSystemMetrics
GetDC

kernel32

GetTickCount
lstrlenW
GetWindowsDirectoryA
GetConsoleOutputCP
lstrlenA
GetProcessHeap
GetModuleHandleA
GetVersion
GetCurrentProcess
GetCommandLineW
lstrcmpiA
CopyFileA
GetThreadLocale
DeleteFileW
GetModuleHandleW
RemoveDirectoryA
GlobalFindAtomA
lstrcmpiW
GetStartupInfoA
IsDebuggerPresent
GetCurrentProcessId
MulDiv
GetOEMCP
SetCurrentDirectoryA
GetCurrentThreadId
GetDriveTypeA
GetACP
GlobalFindAtomW
GetUserDefaultLangID
GetCommandLineA
GetCurrentThread
DeleteFileA
VirtualAlloc
VirtualFree

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Irkclqnb
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Micae. U
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aedb22b1655243a0de8ecc4a50456061

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

glu32

Sections

.text Size: 11KB - Virtual size: 10KB

Irkclqnb Size: 512B - Virtual size: 4KB

.rdata Size: 24KB - Virtual size: 24KB

Micae. U Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 29KB - Virtual size: 28KB

.text
Size: 11KB - Virtual size: 10KB

Irkclqnb
Size: 512B - Virtual size: 4KB

.rdata
Size: 24KB - Virtual size: 24KB

Micae. U
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 29KB - Virtual size: 28KB