a2c7a0a74a7817ca594396f19081a9cd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a2c7a0a74a7817ca594396f19081a9cd_JaffaCakes118
Size

168KB
MD5

a2c7a0a74a7817ca594396f19081a9cd
SHA1

8f822f54c112dcae709e706931950fee51955f42
SHA256

44852242d7348b1749fc1a281c722b674e3b1a9813cfb79bdd581b158bd0b20f
SHA512

21a8b7f3201c020531b84820a8f8bb1583b9080b0a98b778b5991c4cedc01a9effa95b1cf68df9f7109903379a4a4faf902a8cb371251cae4a45a3f2a6dd8d34
SSDEEP

3072:CWv42JFWMokB/TqyFiEjaHXl6Q+M9/XVgqajG6r:l3juyfap+IX4J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2c7a0a74a7817ca594396f19081a9cd_JaffaCakes118

Files

a2c7a0a74a7817ca594396f19081a9cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

847d1b1f29ae3606b4ab244f15e31be8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
TranslateMessage
CharNextA
GetParent
GetDC
GetSystemMetrics

kernel32

DeleteFileW
GetModuleHandleW
IsDebuggerPresent
MulDiv
GetCurrentProcess
lstrcmpiW
GetTickCount
GetStartupInfoA
GetProcessHeap
GlobalFindAtomW
GetCurrentThreadId
GetCurrentProcessId
GetWindowsDirectoryA
lstrcmpA
GetVersion
CopyFileA
GetModuleHandleA
RemoveDirectoryA
GlobalFindAtomA
GetThreadLocale
DeleteFileA
lstrcmpiA
GetCommandLineA
GetUserDefaultLangID
lstrlenW
GetOEMCP
SetCurrentDirectoryA
GetCommandLineW
QueryPerformanceCounter
GetCurrentThread
GetDriveTypeA
GetConsoleOutputCP
VirtualAlloc
VirtualFree

gdi32

GetDeviceCaps
GetTextMetricsA
CreateSolidBrush
CreateFontIndirectA
SetTextAlign
SetStretchBltMode
GetStockObject
CreateCompatibleDC
LineTo
RectVisible
GetClipBox
SelectObject
SetTextColor
DeleteDC
GetObjectA
PatBlt
CreatePen
SelectPalette
DeleteObject
RestoreDC
SaveDC
SetMapMode
CreatePalette
GetPixel

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Bymfqber
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Afqs, Qv
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

847d1b1f29ae3606b4ab244f15e31be8

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 11KB - Virtual size: 10KB

Bymfqber Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 25KB

Afqs, Qv Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 101KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 11KB - Virtual size: 10KB

Bymfqber
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 25KB

Afqs, Qv
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 101KB

.rsrc
Size: 28KB - Virtual size: 28KB