64b97c14e1fcf8c59a8574b1e2daaa0c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

64b97c14e1fcf8c59a8574b1e2daaa0c_JaffaCakes118
Size

166KB
MD5

64b97c14e1fcf8c59a8574b1e2daaa0c
SHA1

43241b9f14d8e5c8b86323bef913dcc135d93469
SHA256

b04a801f99a022cd29df24cc2abbc4cd4e17e3fe62586a40d828a770e2fdd1af
SHA512

8274e32984eb7bd3d51bdf525baec34979f55080e21d1604bff0577639d0e6fa548e274b906d2bfe874a19ecb3f9019badaa4bb3a0cc044f2dca340aa440885a
SSDEEP

3072:2D9bJyKPnsH5fGr7Rz1+EQJ25hBufQy3l99w6Fxkz:26SsKNgNJ0ufQcl9Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b97c14e1fcf8c59a8574b1e2daaa0c_JaffaCakes118

Files

64b97c14e1fcf8c59a8574b1e2daaa0c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdf1d808803e683b897e4c5209ea67c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetObjectA
SetTextColor
DeleteDC
CreateSolidBrush
SetMapMode
GetTextMetricsA
GetStockObject
SelectPalette
GetDeviceCaps
SetTextAlign
CreateCompatibleDC
GetPixel
CreatePen
SelectObject
DeleteObject
PatBlt
CreateFontIndirectA
SetStretchBltMode
RestoreDC
LineTo
CreatePalette
SaveDC
RectVisible
GetClipBox

kernel32

GetCurrentProcess
lstrcmpA
GetModuleHandleW
GetCurrentProcessId
lstrcmpiW
GlobalFindAtomW
MulDiv
GetOEMCP
GetVersion
lstrlenW
GetModuleHandleA
GetCommandLineW
RemoveDirectoryA
DeleteFileW
GetCurrentThread
DeleteFileA
GetCurrentThreadId
GetStartupInfoA
SetCurrentDirectoryA
GetDriveTypeA
lstrlenA
GetThreadLocale
GetUserDefaultLangID
lstrcmpiA
GetACP
GlobalFindAtomA
GetCommandLineA
GetConsoleOutputCP
GetWindowsDirectoryA
IsDebuggerPresent
QueryPerformanceCounter
VirtualAlloc
VirtualFree

user32

TranslateMessage
GetDesktopWindow
GetParent
GetDC
CharNextA
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Kdwdgv R
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sxpexsaa
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdf1d808803e683b897e4c5209ea67c5

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

user32

glu32

Sections

.text Size: 11KB - Virtual size: 10KB

Kdwdgv R Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 25KB

Sxpexsaa Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 27KB - Virtual size: 26KB

.text
Size: 11KB - Virtual size: 10KB

Kdwdgv R
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 25KB

Sxpexsaa
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 27KB - Virtual size: 26KB