833ba3ef3fa8062601ad4e084ffdfc5d_JaffaCakes118

General

Target

833ba3ef3fa8062601ad4e084ffdfc5d_JaffaCakes118
Size

111KB
MD5

833ba3ef3fa8062601ad4e084ffdfc5d
SHA1

df54bd75211341f76e24333ab1485be6747e4c0a
SHA256

f16a7fe1f426b62e1bfedce510cdde556a3f29028f209fc43dfb5516f6cc8934
SHA512

593ceae6c3f30ec9f3e98d02c2fe3d7c35fc1018dfbbf68017c1ed5d0ae3fafafd5d56b6170207d27a90e0975430d1ab06a573c52c9cdb55b1f966f4b81d8264
SSDEEP

1536:yUvG2FU4SHj/Eb1U0Plrdr+jP13sNibk6QUMY0TahFI6tcSd+iasEDN:Q2F8dktdr+jd342XQpTMH2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
833ba3ef3fa8062601ad4e084ffdfc5d_JaffaCakes118

Files

833ba3ef3fa8062601ad4e084ffdfc5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c75daeea5d0b7de6e827a513253fa751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
TranslateMessage
GetParent
GetSystemMetrics
CharNextA

kernel32

RemoveDirectoryA
GetVersion
lstrcmpiA
GetModuleHandleW
GetCommandLineA
GetThreadLocale
GetProcessHeap
MulDiv
GlobalFindAtomW
QueryPerformanceCounter
GlobalFindAtomA
lstrcmpiW
GetTickCount
GetCurrentProcess
DeleteFileA
GetCommandLineW
GetDriveTypeA
lstrlenW
GetCurrentProcessId
GetWindowsDirectoryA
GetModuleHandleA
GetACP
CopyFileA
lstrlenA
RemoveDirectoryW
SetCurrentDirectoryA
GetStartupInfoA
GetUserDefaultLangID
GetOEMCP
GetConsoleOutputCP
GetCurrentThreadId
GetCurrentThread
IsDebuggerPresent
lstrcmpA
DeleteFileW
VirtualAlloc
VirtualFree

gdi32

SetTextAlign
GetClipBox
SaveDC
CreateFontIndirectA
DeleteDC
RectVisible
GetObjectA
GetDeviceCaps
SetTextColor
DeleteObject
CreateSolidBrush
RestoreDC
PatBlt
CreatePen
CreatePalette
SetMapMode
GetTextMetricsA
LineTo
SetPixel
CreateCompatibleDC
GetStockObject
SetStretchBltMode
SelectObject
GetPixel
SelectPalette

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c75daeea5d0b7de6e827a513253fa751

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 12KB - Virtual size: 40KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 12KB - Virtual size: 40KB