96bcefc04a60a178a1eb045703f8424c_JaffaCakes118

General

Target

96bcefc04a60a178a1eb045703f8424c_JaffaCakes118
Size

115KB
MD5

96bcefc04a60a178a1eb045703f8424c
SHA1

ff303ada7c400d19315ddf6ab00900636f0aa9e5
SHA256

d241fd1953be505c51b7c97f9c6aae68ccfe40a91b43e9431dadaadcd6812016
SHA512

1a1e27f627da04e7be76490213b74fa104b435197abee9af8fc642b1935fdf1149cd421132dc7c6d32beccacbe3a09f67fbaf2a6a770817a43dcbad0f80c06da
SSDEEP

1536:H2Ta/aO9y8qMAAjAT1Iw8Ds9SEMgEG75DrOIWAhc70TZ+ww3f7uC2ACdR4:Oa99cJt4s4E8IWAhc7wZ9Uf7uC29R4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96bcefc04a60a178a1eb045703f8424c_JaffaCakes118

Files

96bcefc04a60a178a1eb045703f8424c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c73b3353d4009797874a2534293ae22f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetWindowsDirectoryA
lstrcmpiW
GetProcessHeap
lstrcmpiA
GetModuleHandleW
GlobalFindAtomW
GetThreadLocale
GetTickCount
DeleteFileA
GetUserDefaultLangID
GetCommandLineW
GlobalFindAtomA
GetCommandLineA
CopyFileA
GetACP
GetCurrentProcessId
SetCurrentDirectoryA
QueryPerformanceCounter
GetStartupInfoA
lstrlenW
GetCurrentThread
lstrlenA
GetOEMCP
MulDiv
lstrcmpA
DeleteFileW
GetCurrentProcess
RemoveDirectoryA
GetConsoleOutputCP
GetVersion
VirtualAlloc
VirtualFree
IsDebuggerPresent
GetCurrentThreadId
RemoveDirectoryW
GetDriveTypeA

gdi32

GetDeviceCaps
CreateCompatibleDC
SetTextAlign
GetClipBox
CreatePalette
SelectPalette
GetStockObject
DeleteObject
CreatePen
CreateSolidBrush
CreateFontIndirectA
SetStretchBltMode
SetMapMode
SetTextColor
GetTextMetricsA
GetObjectA
SaveDC
RestoreDC
GetPixel
DeleteDC
SelectObject
LineTo
PatBlt
RectVisible
SetPixel

user32

TranslateMessage
CharNextA
GetSystemMetrics
GetParent
GetDesktopWindow

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c73b3353d4009797874a2534293ae22f

Headers

File Characteristics

Imports

kernel32

gdi32

user32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 15KB - Virtual size: 43KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 15KB - Virtual size: 43KB