a3ad080b93f1a6eb0376bcd0815968f0_JaffaCakes118

General

Target

a3ad080b93f1a6eb0376bcd0815968f0_JaffaCakes118
Size

41KB
MD5

a3ad080b93f1a6eb0376bcd0815968f0
SHA1

437d25d8317342e8dead12fc81dcb379211075a9
SHA256

efd25d4dd94f45f4abd0b6af198a500ffaaccf67b6da4c87bebee028c81e2c21
SHA512

6109b53df14eed0fe7c1802cf53efa169b0d3dc8ac763e9c8ebbdf066843407c9bd2708628b8627d66bc62fde8e6f224db8857ae69966a0af4eb390cca037abc
SSDEEP

768:eXYGgTTFUkyF9TTPTTvTTvTTPTTvTTDZJK+sbiOgh0:vJLyF9TTPTTvTTvTTPTTvTTDDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3ad080b93f1a6eb0376bcd0815968f0_JaffaCakes118

Files

a3ad080b93f1a6eb0376bcd0815968f0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

99ef1c5b38469bd67f019d5513ddf381

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetModuleHandleA
ExitProcess
FindResourceA
SizeofResource
LoadResource
CreateFileA
SetFilePointer
ReadFile
CloseHandle
HeapCreate
CreateThread
SetThreadPriority
WaitForSingleObject
HeapDestroy
Sleep
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcmpi
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
GetProcAddress
GetModuleFileNameA

user32

RegisterClassA
CreateWindowExA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
GetClientRect
InvalidateRect
GetDC
ReleaseDC
PostQuitMessage
MessageBeep

gdi32

ChoosePixelFormat
SetPixelFormat
SwapBuffers

opengl32

glBegin
glClear
glClearColor
glColor3f
glDepthFunc
glEnable
glEnd
glHint
glLoadIdentity
glReadPixels
glRotatef
glShadeModel
glTranslatef
glVertex3f
glViewport
wglCreateContext
wglDeleteContext
wglMakeCurrent

winmm

waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutClose

Sections

.flat
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

99ef1c5b38469bd67f019d5513ddf381

Headers

File Characteristics

Imports

kernel32

user32

gdi32

opengl32

winmm

Sections

.flat Size: 40KB - Virtual size: 40KB

.bss Size: - Virtual size: 72KB

.flat
Size: 40KB - Virtual size: 40KB

.bss
Size: - Virtual size: 72KB