6f6ef47293fb99725437ecd92550acb6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f6ef47293fb99725437ecd92550acb6_JaffaCakes118
Size

167KB
MD5

6f6ef47293fb99725437ecd92550acb6
SHA1

a83e1499e04ab9624052fced2b2c294daeea3c47
SHA256

59c5643c1ad4ebfbdb4dbee62c6e53c1c872c39524182eb9a6acb5d5301efc97
SHA512

fa73d3dd1f141e82948e0624ef8d65215ff0f44466f4700a151fc4b2ff94fdccdfc7d5c0e69437290b06e46150512f3aa6cd82af88ddea4a19596fcddf6b0d9e
SSDEEP

3072:1JSOAs49ZHw6IbeOeH2PxlQMTWMZZNzMON9vqwBTdDrFID:HAs4bFia2PxlQsWMZZNhJpc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f6ef47293fb99725437ecd92550acb6_JaffaCakes118

Files

6f6ef47293fb99725437ecd92550acb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63b06577df5ecbac44e452509de9ed2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetDesktopWindow
GetDC
TranslateMessage
GetSystemMetrics
GetParent

gdi32

CreatePen
SaveDC
CreateCompatibleDC
LineTo
SelectPalette
GetStockObject
GetPixel
SetMapMode
SetTextColor
RestoreDC
DeleteDC
GetTextMetricsA
CreateFontIndirectA
CreatePalette
PatBlt
SetStretchBltMode
GetClipBox
CreateSolidBrush
GetDeviceCaps
GetObjectA
DeleteObject
SetTextAlign
RectVisible

kernel32

GetStartupInfoA
RemoveDirectoryA
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
MulDiv
lstrlenA
GetThreadLocale
GetDriveTypeA
GetModuleHandleW
GetModuleHandleA
DeleteFileA
GetCommandLineA
QueryPerformanceCounter
GetCurrentThreadId
SetCurrentDirectoryA
lstrcmpiA
DeleteFileW
CopyFileA
GetWindowsDirectoryA
GlobalFindAtomW
GetVersion
GlobalFindAtomA
GetCurrentThread
GetProcessHeap
GetOEMCP
VirtualAlloc
VirtualFree
lstrcmpiW
GetUserDefaultLangID
IsDebuggerPresent
lstrlenW
GetTickCount
GetConsoleOutputCP
lstrcmpA

glu32

gluNurbsCallback

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ylmftg A
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Skkphkbg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63b06577df5ecbac44e452509de9ed2e

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

kernel32

glu32

Sections

.text Size: 10KB - Virtual size: 10KB

Ylmftg A Size: 512B - Virtual size: 4KB

.rdata Size: 26KB - Virtual size: 25KB

Skkphkbg Size: 512B - Virtual size: 4KB

.data Size: 99KB - Virtual size: 99KB

.rsrc Size: 29KB - Virtual size: 28KB

.text
Size: 10KB - Virtual size: 10KB

Ylmftg A
Size: 512B - Virtual size: 4KB

.rdata
Size: 26KB - Virtual size: 25KB

Skkphkbg
Size: 512B - Virtual size: 4KB

.data
Size: 99KB - Virtual size: 99KB

.rsrc
Size: 29KB - Virtual size: 28KB