858b7049ccbee9f1160b97cd3b0243b0_JaffaCakes118

General

Target

858b7049ccbee9f1160b97cd3b0243b0_JaffaCakes118
Size

186KB
MD5

858b7049ccbee9f1160b97cd3b0243b0
SHA1

29cad694df3e1cc735360c01d91fce8c234361ee
SHA256

a6c90d8ec22816f9e738acd13bdde1192b9f08251a00bbefb0c75912837f6440
SHA512

78a6fef57f2166a8554db4d4c77967199a1a363a120e4042b6f9c0d68d855d704bdd1c98568d2a056dacd2093a325b650d63067c3160a5b076666208acfb6c0c
SSDEEP

3072:0n6vBEEvERgS1z1/rUP44bqPvtiFEoZkz8sCPUqHVQ1OWHkRqi/3HuNGRFIcqEI1:csrWm44WPKEL8sC8qHq1OWHi/39RCcbS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
858b7049ccbee9f1160b97cd3b0243b0_JaffaCakes118

Files

858b7049ccbee9f1160b97cd3b0243b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cea3f722565a31cd7305bfedc3adc0e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_vsnwprintf
__set_app_type
__wgetmainargs
__p__commode
??2@YAPAXI@Z
_initterm

kernel32

ExitProcess
SetThreadPriority
CompareStringA
WideCharToMultiByte
GetCurrentProcess
GlobalLock
GetTempPathW
HeapFree
HeapCreate
UnmapViewOfFile
FlushFileBuffers
GetTickCount
InterlockedDecrement
IsBadCodePtr
GetModuleFileNameA
DeleteCriticalSection
OutputDebugStringA
GetStringTypeW
HeapSize
InitializeCriticalSection
FreeLibrary
GetFileSize
LoadResource
LoadLibraryW
TlsSetValue
GetCurrentThreadId
GetVersionExW
VirtualAlloc
GetProcAddress
InterlockedIncrement
LCMapStringA
EnterCriticalSection
SizeofResource
FindNextFileW

user32

WindowFromPoint
ScreenToClient
CharNextA
MessageBoxA
GetDlgItemTextW
InvalidateRect
SetFocus
DefWindowProcA
GetWindowLongA
ReleaseDC
MoveWindow
GetSysColor
DrawIconEx
DestroyMenu
IsWindow
KillTimer
GetDC

opengl32

glPushMatrix

gdi32

GetPixel
CreateFontIndirectA
CreateDIBitmap
RealizePalette

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cea3f722565a31cd7305bfedc3adc0e3

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

opengl32

gdi32

Sections

.text Size: 113KB - Virtual size: 113KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 13KB - Virtual size: 24KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 113KB - Virtual size: 113KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 13KB - Virtual size: 24KB

.rsrc
Size: 2KB - Virtual size: 2KB