5b298090ec3ab63b7bc0631f38719902_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5b298090ec3ab63b7bc0631f38719902_JaffaCakes118
Size

122KB
MD5

5b298090ec3ab63b7bc0631f38719902
SHA1

c610a47f1ff5d6a8d3f001d147dd295488d95692
SHA256

1e8a9a744279be2d86cfad6c9bb84a36df14d13489fb8a09b92e6658f1b7ecae
SHA512

e30d7bd704f54d90b3abedbededc56b30817eda5169b8fabf1143f9e8343a68dd9aae32615cc98f125bd2af73c1184fcb41db178e14b8a57827f1636d45f836f
SSDEEP

1536:KAsneq+QXCvKfPXMqKEQY6mmvu51Pc3Drb7sIFXOH+tYalu+M+rRU:fe+zvknh6Hvea3r5G+tYal7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b298090ec3ab63b7bc0631f38719902_JaffaCakes118

Files

5b298090ec3ab63b7bc0631f38719902_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb445a4e74d5951e0652701461cf2054

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
LoadLibraryW
SetEndOfFile
GetEnvironmentStringsW
GetTempFileNameW
GetLastError
VirtualAlloc
HeapDestroy
LocalFileTimeToFileTime
GetModuleHandleA
lstrcpyW
FlushFileBuffers
VirtualFree
GlobalAlloc
GlobalReAlloc
VirtualAlloc
GetProcAddress
CloseHandle
GlobalUnlock
VirtualProtect
ExitProcess
UnhandledExceptionFilter
GetCommandLineW

msvcrt

atoi
realloc
_c_exit
fclose
toupper
_wcsicmp
__winitenv
exit
_vsnprintf
towupper
strchr
wcstok
_wtol
wcstol
_onexit
__getmainargs
wcsncpy
wcschr
_CxxThrowException
__setusermatherr
_wcsnicmp
__dllonexit
wcsstr
memcpy
memset
_wtoi
_except_handler3
__CxxFrameHandler

user32

GetDlgItemInt
TranslateMessage
GetWindowTextLengthW
SetForegroundWindow
MessageBoxW
SetTimer
DialogBoxParamA
KillTimer
GetParent
SetWindowLongW
LoadStringW
IsWindow
RegisterClassA
GetFocus
RegisterClipboardFormatW
PostMessageA

gdi32

CreateCompatibleBitmap
CreateFontIndirectA
SetTextColor
GetStockObject
CreateBitmap
TranslateCharsetInfo
RestoreDC
SelectObject
StretchBlt
PatBlt
CreateSolidBrush
SetStretchBltMode
SetBkMode
CreateCompatibleDC

opengl32

glTexCoord1sv

Exports

Exports

GlfAxdjBfditacOxn
EdGvygveDhxuYusjqk

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pr00
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pr01
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb445a4e74d5951e0652701461cf2054

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 85B

.pr00 Size: 1KB - Virtual size: 1KB

.pr01 Size: 1KB - Virtual size: 1KB

.rsrc Size: 106KB - Virtual size: 106KB

.reloc Size: 512B - Virtual size: 38B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 85B

.pr00
Size: 1KB - Virtual size: 1KB

.pr01
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 106KB - Virtual size: 106KB

.reloc
Size: 512B - Virtual size: 38B