6a8d5db670a45dd1ac7ded4b015ee3af_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6a8d5db670a45dd1ac7ded4b015ee3af_JaffaCakes118
Size

296KB
MD5

6a8d5db670a45dd1ac7ded4b015ee3af
SHA1

3f7d0d929b613865965a961d2a1feb62969d76a7
SHA256

b1c1e8f6ecdc8398d95a237f970a14254ee8e34e742e458fa3b82928234672d5
SHA512

52f51a47990a332828573437133ce658fc01bbd8f9c074c8d0af6abaadf558d6855f5ab0274e18746c59d66745cd579effb5ad3327cefb9c84af8f4c8961cc3d
SSDEEP

6144:TRhxUfOMMwLadpyD2JtnKfBD8KVx8lRdDBpq:TRw2wSHnKt/ef8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a8d5db670a45dd1ac7ded4b015ee3af_JaffaCakes118

Files

6a8d5db670a45dd1ac7ded4b015ee3af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

134cf5c0165bf563aca5d7158b9ff1e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
atoi
calloc
exit
fclose
fgetc
fopen
fprintf
free
freopen
fwrite
malloc
printf
puts
rand
remove
setbuf
setvbuf
signal
sprintf
strlen
strrchr
vfprintf

sdl

SDL_CreateRGBSurface
SDL_DisplayFormat
SDL_DisplayFormatAlpha
SDL_Flip
SDL_FreeSurface
SDL_GetError
SDL_Init
SDL_ListModes
SDL_MapRGB
SDL_PollEvent
SDL_Quit
SDL_RWFromFile
SDL_SetAlpha
SDL_SetColorKey
SDL_SetModuleHandle
SDL_SetVideoMode
SDL_ShowCursor
SDL_SoftStretch
SDL_UpperBlit
SDL_WM_SetCaption
SDL_WaitEvent
SDL_getenv
SDL_strlcat
SDL_strlcpy

sdl_gfx

SDL_framerateDelay
SDL_initFramerate
SDL_setFramerate
boxRGBA
rotozoomSurfaceXY

sdl_image

IMG_Load

sdl_mixer

Mix_PlayChannelTimed
Mix_OpenAudio
Mix_LoadWAV_RW
Mix_CloseAudio

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 1024B - Virtual size: 931B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/87
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 1024B - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/123
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/134
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

134cf5c0165bf563aca5d7158b9ff1e9

Headers

File Characteristics

Imports

kernel32

msvcrt

sdl

sdl_gfx

sdl_image

sdl_mixer

Sections

.text Size: 13KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 936B

/4 Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 56KB

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.stab Size: 30KB - Virtual size: 30KB

.stabstr Size: 168KB - Virtual size: 167KB

/14 Size: 512B - Virtual size: 288B

/29 Size: 1024B - Virtual size: 931B

/45 Size: 1KB - Virtual size: 1KB

/61 Size: 23KB - Virtual size: 22KB

/73 Size: 3KB - Virtual size: 3KB

/87 Size: 3KB - Virtual size: 3KB

/99 Size: 1KB - Virtual size: 1KB

/112 Size: 1024B - Virtual size: 855B

/123 Size: 9KB - Virtual size: 8KB

/134 Size: 512B - Virtual size: 248B

.text
Size: 13KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 936B

/4
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 56KB

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.stab
Size: 30KB - Virtual size: 30KB

.stabstr
Size: 168KB - Virtual size: 167KB

/14
Size: 512B - Virtual size: 288B

/29
Size: 1024B - Virtual size: 931B

/45
Size: 1KB - Virtual size: 1KB

/61
Size: 23KB - Virtual size: 22KB

/73
Size: 3KB - Virtual size: 3KB

/87
Size: 3KB - Virtual size: 3KB

/99
Size: 1KB - Virtual size: 1KB

/112
Size: 1024B - Virtual size: 855B

/123
Size: 9KB - Virtual size: 8KB

/134
Size: 512B - Virtual size: 248B