5d60c2ffb76a431bbb100141f234541a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5d60c2ffb76a431bbb100141f234541a_JaffaCakes118
Size

165KB
MD5

5d60c2ffb76a431bbb100141f234541a
SHA1

17c6dc91285741529177be3412292de807d824d3
SHA256

abeac85b0c17bd9f9427fd91b1b42e5581bba5e0b35ae50e6089203e0154ba43
SHA512

af74c1aaa43b680f36e3e768d87d1a22bedf951182ac43239119c18aee1b1fd08b703a2d92d381b24b37ec0440e058ec706f17d81359f0bcc42938dec229280d
SSDEEP

3072:CzMUu1rZzfwemM2WaVSRgR/FoiCTwa5hmj4hmrepiODBQmn7TA2k4X:k8rZ7bm2DKNoiKwaDmchjpifmp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d60c2ffb76a431bbb100141f234541a_JaffaCakes118

Files

5d60c2ffb76a431bbb100141f234541a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

51c6bd8842910d0589449b36585ba06a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetCurrentProcess
GetCommandLineW
GetWindowsDirectoryA
DeleteFileA
GetTickCount
lstrcmpiA
GetStartupInfoA
GetACP
lstrlenW
lstrlenA
GetDriveTypeA
CopyFileA
GetConsoleOutputCP
GetThreadLocale
lstrcmpiW
GetProcessHeap
GetOEMCP
GetModuleHandleW
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
RemoveDirectoryA
GlobalFindAtomW
GlobalFindAtomA
GetCurrentThread
GetCommandLineA
GetModuleHandleA
GetUserDefaultLangID
IsDebuggerPresent
MulDiv
VirtualAlloc
VirtualFree

user32

GetSystemMetrics
TranslateMessage
GetDC
GetParent
CharNextA
GetDesktopWindow

gdi32

GetStockObject
GetPixel
CreateFontIndirectA
SetMapMode
SelectObject
DeleteDC
DeleteObject
CreatePen
SetStretchBltMode
GetClipBox
GetDeviceCaps
CreateCompatibleDC
CreateSolidBrush
CreatePalette
SelectPalette
PatBlt
SaveDC
SetTextColor
SetTextAlign
GetObjectA
RestoreDC
RectVisible
GetTextMetricsA
LineTo

glu32

gluNurbsCallback

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Nmlrfrxg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Paducrhx
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51c6bd8842910d0589449b36585ba06a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

glu32

Sections

.text Size: 10KB - Virtual size: 10KB

Nmlrfrxg Size: 512B - Virtual size: 4KB

.rdata Size: 24KB - Virtual size: 24KB

Paducrhx Size: 512B - Virtual size: 4KB

.data Size: 100KB - Virtual size: 100KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 10KB - Virtual size: 10KB

Nmlrfrxg
Size: 512B - Virtual size: 4KB

.rdata
Size: 24KB - Virtual size: 24KB

Paducrhx
Size: 512B - Virtual size: 4KB

.data
Size: 100KB - Virtual size: 100KB

.rsrc
Size: 27KB - Virtual size: 27KB