762d1710b1a78f746957fc074b886f4e_JaffaCakes118

General

Target

762d1710b1a78f746957fc074b886f4e_JaffaCakes118
Size

165KB
MD5

762d1710b1a78f746957fc074b886f4e
SHA1

524e792911be65c048b1652b3ed47d16f5e292e7
SHA256

c9844dc552a8ed13fd129eae698db310f34bb119218dab7baefe41f513d01b41
SHA512

73aa8811348dd177604bd71f4ff31dc14da33e435015c8d3a96562ee18ac33698b29022aeea126edf1dd302e35a68622b4ff25e0e8c3a6c5fff75f1c586faac0
SSDEEP

3072:EY5mbG4ivdrot1h70zuMs/dTrswh13tL0h:55F4CMjIzu5/dI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
762d1710b1a78f746957fc074b886f4e_JaffaCakes118

Files

762d1710b1a78f746957fc074b886f4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1850199d1b32bc58a1156dda0880b2ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
GetUserDefaultLangID
GetWindowsDirectoryA
GetStartupInfoA
RemoveDirectoryA
DeleteFileA
GlobalFindAtomA
GetCurrentThread
GetCurrentProcess
GlobalFindAtomW
GetCurrentProcessId
GetProcessHeap
GetVersion
GetDriveTypeA
GetConsoleOutputCP
GetThreadLocale
GetTickCount
QueryPerformanceCounter
lstrcmpiW
GetModuleHandleW
GetCurrentThreadId
GetModuleHandleA
DeleteFileW
lstrcmpA
GetCommandLineA
MulDiv
lstrcmpiA
GetACP
VirtualAlloc
GetOEMCP
VirtualFree
CopyFileA
lstrlenW
GetCommandLineW
IsDebuggerPresent

gdi32

GetPixel
GetDeviceCaps
CreateSolidBrush
GetStockObject
DeleteObject
RestoreDC
GetTextMetricsA
SetTextAlign
SelectObject
CreateCompatibleDC
SetStretchBltMode
DeleteDC
LineTo
RectVisible
SetTextColor
PatBlt
CreatePalette
SetMapMode
CreateFontIndirectA
GetClipBox
SaveDC
CreatePen
SelectPalette
GetObjectA

user32

GetParent
CharNextA
GetSystemMetrics
TranslateMessage
GetDesktopWindow
GetDC

glu32

gluNurbsCallback

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Aqrmxlhw
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Gvopouhb
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1850199d1b32bc58a1156dda0880b2ab

Headers

File Characteristics

Imports

kernel32

gdi32

user32

glu32

Sections

.text Size: 10KB - Virtual size: 10KB

Aqrmxlhw Size: 512B - Virtual size: 4KB

.rdata Size: 26KB - Virtual size: 25KB

Gvopouhb Size: 512B - Virtual size: 4KB

.data Size: 99KB - Virtual size: 99KB

.rsrc Size: 27KB - Virtual size: 26KB

.text
Size: 10KB - Virtual size: 10KB

Aqrmxlhw
Size: 512B - Virtual size: 4KB

.rdata
Size: 26KB - Virtual size: 25KB

Gvopouhb
Size: 512B - Virtual size: 4KB

.data
Size: 99KB - Virtual size: 99KB

.rsrc
Size: 27KB - Virtual size: 26KB