635c94e8788bac4ef3840a2571ff6727_JaffaCakes118

General

Target

635c94e8788bac4ef3840a2571ff6727_JaffaCakes118
Size

92KB
MD5

635c94e8788bac4ef3840a2571ff6727
SHA1

4fe02ac552ad1caeb4188ac844818485e8647617
SHA256

3a12457a544c713105f016682c5517aab9d06a2caab9380ed747c31f211dc87a
SHA512

0e2a9d236cb8455004b3e7a9e4df3ac5094a474749a9cfdc19f6375c39d91787cb2d21076f727ec408bf4ae7daf6db98e9e0926402532c84d72889409c6695b7
SSDEEP

1536:auaYjNMrD84K5RANM5vmk4MaJ51deuRmws/nhCJWMMQXqDCI1VwhXt7CTyG:auaG2cUDPZDHRhjMQXxILcNCR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
635c94e8788bac4ef3840a2571ff6727_JaffaCakes118

Files

635c94e8788bac4ef3840a2571ff6727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f7eef746a7678399eb380315ef06a25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetMailslotInfo
SetConsoleWindowInfo
PulseEvent
EnumResourceTypesA
SetConsoleMode
GetVersionExA
ReleaseMutex
HeapCreate
CreateToolhelp32Snapshot
CreateDirectoryExA
VirtualAlloc
CreateMutexW
SetCurrentDirectoryA
GetModuleHandleA
GetVersionExW
SetConsoleTextAttribute
VirtualFree
SetConsoleScreenBufferSize
ExitThread
SetErrorMode
HeapFree
GetEnvironmentVariableA
CompareStringW
Heap32ListFirst
GetFullPathNameW
CloseHandle
CopyFileA
GetLastError
SetConsoleTitleA
VerSetConditionMask
HeapDestroy

msvcrt

_pwctype
_unlock
iswlower
memcpy
_ecvt
_wfullpath
_ultow
_adj_fdiv_m64
atoi
_mbsncat
_spawnvp
_ftol
_wremove
strspn
_heapmin
_wfsopen
vprintf

winmm

midiOutUnprepareHeader
joySetThreshold
midiInStart
mciSetDriverData
waveOutGetErrorTextW
midiOutGetVolume
timeSetEvent

opengl32

glTexCoord4fv
glRasterPos2sv
glMap2d
glEdgeFlagPointer
glRasterPos2d
glDisableClientState
glColor4bv
glRasterPos4i
glColor3ubv
glMultMatrixd
glGetTexLevelParameterfv
glMaterialiv
glPopMatrix
glColor3us
glEvalMesh2
glRectf
wglSwapLayerBuffers
glIsTexture
glListBase

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f7eef746a7678399eb380315ef06a25

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

winmm

opengl32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 512B - Virtual size: 60B

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 512B - Virtual size: 60B