45f211a37c8ce0339948ccfcabc58873_JaffaCakes118

General

Target

45f211a37c8ce0339948ccfcabc58873_JaffaCakes118
Size

135KB
MD5

45f211a37c8ce0339948ccfcabc58873
SHA1

adb14a21920a8513465e1f2ec4836e05aff8d66b
SHA256

d31845e9f81b58b3c2c69951a2a926efdcf20ef2a6afd4500cb47c8e08b8327c
SHA512

668dacb02100a2809f21838efc764f5effc749ea8ea0103e8b698992e3de7fc98deb90e92dbbe8800c9c40757cf2cc29ceb682488c0aa27cc0e30481dee24d7d
SSDEEP

3072:OIaDCeDrg5mfZ9VTamv/TEM0E1KOtgQEbZNoUZ:OWqx/wMLGQEjoUZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45f211a37c8ce0339948ccfcabc58873_JaffaCakes118

Files

45f211a37c8ce0339948ccfcabc58873_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c93015d8e86be0969dd5274da25a3fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetConsoleOutputCP
lstrlenA
GetThreadLocale
GetLastError
GetModuleHandleW
GetACP
GetTickCount
GetOEMCP
GetCurrentProcess
DeleteFileA
CopyFileA
MulDiv
IsDebuggerPresent
lstrcmpiW
SetCurrentDirectoryA
lstrcmpA
lstrcmpiA
GetProcessHeap
DeleteFileW
GetUserDefaultLangID
GetCommandLineW
GetCurrentProcessId
RemoveDirectoryA
GlobalFindAtomA
GetCurrentThread
SetLastError
lstrlenW
GetModuleHandleA
GlobalFindAtomW
GetCurrentThreadId
GetCommandLineA
VirtualAlloc

gdi32

ScaleViewportExtEx
SetWindowExtEx
Rectangle
CreatePatternBrush
CreateCompatibleBitmap
StretchBlt
RectVisible
ExcludeClipRect
PatBlt
GetDeviceCaps
GetDIBColorTable
DeleteObject
PlayEnhMetaFile
GetClipBox
MoveToEx
LPtoDP
GetCharWidth32A
StartPage
OffsetViewportOrgEx
DeleteDC
CreatePen
SetROP2
SaveDC
EndDoc
SetBkColor
PtVisible
BitBlt
SetBkMode
IntersectClipRect
MaskBlt
SetDIBColorTable
SetMapMode
GetTextMetricsA
EndPath
GetDCOrgEx
GetBrushOrgEx
BeginPath
SetBrushOrgEx
GetPixel
SelectClipPath
GetEnhMetaFilePaletteEntries
SelectPalette
GetStockObject
SelectObject
LineTo
EndPage
DPtoLP
CreateBitmap
GetPaletteEntries
SetTextColor
UnrealizeObject
SetStretchBltMode
CreateRectRgn

user32

CharNextA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6c93015d8e86be0969dd5274da25a3fb

Headers

File Characteristics

Imports

kernel32

gdi32

user32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 16KB - Virtual size: 132KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 16KB - Virtual size: 132KB