a195d280476f22a54aa0a66ae0574bd2_JaffaCakes118

General

Target

a195d280476f22a54aa0a66ae0574bd2_JaffaCakes118
Size

117KB
MD5

a195d280476f22a54aa0a66ae0574bd2
SHA1

0c7dee8cfc3da8d7d6a3613d961d3661b9edfcc1
SHA256

0ff3bee25714ddc75d3a630f631bb79fabdf59b0dba9b2e08644a6b625b0d0a3
SHA512

05ce494f3cc8f0c97241b7b353168f8580b16a5ca72a1360a7381cedae48f250e55c584e6d75867bcbeaf566db670b315552dcbe336d5cc61c7c435c577fe932
SSDEEP

3072:KOWSzCtuLHnFYAnLjH0z1LuUk9rRoXuxQ:KG8/z1dcr2Xu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a195d280476f22a54aa0a66ae0574bd2_JaffaCakes118

Files

a195d280476f22a54aa0a66ae0574bd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e56910269bf8ceb2198e236c20c7eb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetSystemMetrics
GetParent
TranslateMessage
CharNextA

kernel32

IsDebuggerPresent
QueryPerformanceCounter
GetVersion
GetDriveTypeA
lstrlenW
GetCurrentProcessId
GetWindowsDirectoryA
SetCurrentDirectoryA
lstrcmpiW
GetModuleHandleW
DeleteFileW
GetCurrentProcess
GetUserDefaultLangID
lstrlenA
GetCurrentThreadId
GetCommandLineA
CopyFileA
GetOEMCP
GetStartupInfoA
GetModuleHandleA
DeleteFileA
GetProcessHeap
GetConsoleOutputCP
GlobalFindAtomW
lstrcmpiA
RemoveDirectoryW
lstrcmpA
GetCommandLineW
MulDiv
GetThreadLocale
GetACP
RemoveDirectoryA
GlobalFindAtomA
GetCurrentThread
VirtualAlloc
GetTickCount
VirtualFree

gdi32

RestoreDC
LineTo
DeleteObject
PatBlt
CreateSolidBrush
GetObjectA
CreatePalette
SetStretchBltMode
GetStockObject
RectVisible
SaveDC
DeleteDC
GetTextMetricsA
CreatePen
GetPixel
CreateCompatibleDC
SetTextColor
SelectObject
GetDeviceCaps
SelectPalette
CreateFontIndirectA
SetPixel
SetMapMode
GetClipBox
SetTextAlign

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e56910269bf8ceb2198e236c20c7eb3

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 16KB - Virtual size: 15KB