6abf04d0e3b37eecfa99dea93cbc22d8_JaffaCakes118

General

Target

6abf04d0e3b37eecfa99dea93cbc22d8_JaffaCakes118
Size

115KB
MD5

6abf04d0e3b37eecfa99dea93cbc22d8
SHA1

9494fa0b26abdda492425a17f344b2ee0133905c
SHA256

bf051cae0e7deafbd643cb7affb88f861ec75e6cd37027d6d1d1d929a59691c8
SHA512

e5b6e14b9d32ad5e77565ec9a6c9cb4d390ea35f9896dbcf5b3274163fc766241f09ece342cd19ba00963bd98a99c9be4c9bfc70c6d5b0bf607e6e10d6ca7b7b
SSDEEP

1536:DaRCePspx7cJ3vo2sMZLDuAB3vvlt7yJu/idEhny/IxkwDXg+++cXxs1wKgw0S:VeK7UZLDXtqgbk7+LcXxawK9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6abf04d0e3b37eecfa99dea93cbc22d8_JaffaCakes118

Files

6abf04d0e3b37eecfa99dea93cbc22d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

371a02254531106eee1d78d1340beaa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel
CreatePen
LineTo
RestoreDC
GetStockObject
SelectObject
DeleteObject
SelectPalette
SaveDC
SetTextColor
CreatePalette
RectVisible
SetTextAlign
CreateSolidBrush
GetClipBox
GetDeviceCaps
CreateFontIndirectA
SetMapMode
CreateCompatibleDC
DeleteDC
GetObjectA
SetStretchBltMode
SetPixel
PatBlt
GetTextMetricsA

user32

GetParent
CharNextA
TranslateMessage
GetDesktopWindow
GetSystemMetrics

kernel32

lstrcmpiW
DeleteFileA
GetCurrentThread
GetCommandLineW
GetOEMCP
CopyFileA
GetCommandLineA
lstrlenW
SetCurrentDirectoryA
GetUserDefaultLangID
GetModuleHandleA
GetTickCount
GetThreadLocale
GetCurrentProcessId
DeleteFileW
lstrcmpA
GetModuleHandleW
RemoveDirectoryA
GetVersion
GetCurrentThreadId
GetProcessHeap
GetWindowsDirectoryA
QueryPerformanceCounter
IsDebuggerPresent
GetConsoleOutputCP
RemoveDirectoryW
lstrlenA
lstrcmpiA
MulDiv
GetStartupInfoA
GlobalFindAtomA
GetDriveTypeA
GetACP
GetCurrentProcess
VirtualAlloc
VirtualFree

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

371a02254531106eee1d78d1340beaa6

Headers

File Characteristics

Imports

gdi32

user32

kernel32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 15KB - Virtual size: 14KB