5d9481586104a651096930b4d3169f2e_JaffaCakes118

General

Target

5d9481586104a651096930b4d3169f2e_JaffaCakes118
Size

96KB
MD5

5d9481586104a651096930b4d3169f2e
SHA1

241b09e2400670915f3da3cf0a4c342629b0e2aa
SHA256

529d0ed3ab8d6a380905c075aa64a8f56be155c8fcfafff860a915bd5dddac71
SHA512

8e263db04657253caa5778c52cb53df68b26debed2bdd4a85b541c247fc875e3be4e3b3989eb7ccbcb9f9e8a75e913027855c26914cec4971ca1e271c15799b1
SSDEEP

1536:xvYpAv+MNy5orancj1D7bhrwoGxr+ksRQJPNy2AFJGyDUq/1K:2pc+BMj1DRwPxykWWNJAaWUo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d9481586104a651096930b4d3169f2e_JaffaCakes118

Files

5d9481586104a651096930b4d3169f2e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

effad2be8dba958973330f771f7bd635

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
LineTo
CreatePalette
SetTextColor
SaveDC
RectVisible
SetMapMode
CreateSolidBrush
DeleteObject
GetObjectA
GetClipBox
CreatePen
PatBlt
SelectPalette
CreateFontIndirectA
SetTextAlign
SetStretchBltMode
SelectObject
CreateCompatibleDC
GetDeviceCaps
RestoreDC
GetTextMetricsA
GetNearestPaletteIndex
GetStockObject
GetPixel

kernel32

GetDriveTypeA
GetACP
GetUserDefaultLangID
GetVersion
GetWindowsDirectoryA
MulDiv
GetThreadLocale
lstrcmpiA
GetStartupInfoA
GetModuleHandleA
DeleteFileA
RemoveDirectoryA
VirtualAlloc
GetCommandLineA
lstrlenW
DeleteFileW
GetCurrentThread
GetCommandLineW
GetCurrentThreadId
lstrlenA
lstrcmpA
lstrcmpiW
GetProcessHeap
GetTickCount
GlobalFindAtomA
CopyFileA
GlobalFindAtomW
QueryPerformanceCounter
GetConsoleOutputCP
GetCurrentProcessId
GetModuleHandleW
IsDebuggerPresent
RemoveDirectoryW
GetOEMCP
ExitProcess
GetCurrentProcess

user32

GetParent
CharNextA
GetDC
GetSystemMetrics
GetDesktopWindow
TranslateMessage

glu32

gluQuadricCallback

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

effad2be8dba958973330f771f7bd635

Headers

File Characteristics

Imports

gdi32

kernel32

user32

glu32

Sections

.text Size: 19KB - Virtual size: 18KB

.data Size: 62KB - Virtual size: 61KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 19KB - Virtual size: 18KB

.data
Size: 62KB - Virtual size: 61KB

.rsrc
Size: 14KB - Virtual size: 13KB