a5e86db03b76320b8beb21d01563e677_JaffaCakes118

General

Target

a5e86db03b76320b8beb21d01563e677_JaffaCakes118
Size

114KB
MD5

a5e86db03b76320b8beb21d01563e677
SHA1

b73ca5ad31fc27fb4416afbd9f76ddc39f4d90ec
SHA256

97f1fd985acfef518aae071544e64c70b9eb8702189444c17ee93675190cc7fe
SHA512

7b4b14a10091d05ca451359a29b0452aea600286c8c2d1f288ee9326710ffee28daaff5757597e72e5ed06be7d777817139b05516dafdc2b023eb56068eda483
SSDEEP

1536:MpFibd/rLzMYgPlqwDpaBlJaL9sEFXv0UsyLe+9vZgYT:MpWVLjO1xLuEFc9eg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e86db03b76320b8beb21d01563e677_JaffaCakes118

Files

a5e86db03b76320b8beb21d01563e677_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a7c6d15687a710b21bc4d09a8b9b321

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetDesktopWindow
CharNextA
TranslateMessage
GetSystemMetrics

kernel32

GlobalFindAtomA
lstrlenW
GetModuleHandleW
GetCommandLineA
GetStartupInfoA
lstrcmpiA
RemoveDirectoryA
GetCurrentThread
lstrcmpiW
GetUserDefaultLangID
GetCommandLineW
VirtualAlloc
GetDriveTypeA
DeleteFileW
lstrlenA
GetProcessHeap
VirtualFree
DeleteFileA
GetCurrentProcessId
GetThreadLocale
QueryPerformanceCounter
GetOEMCP
CopyFileA
GetWindowsDirectoryA
GlobalFindAtomW
GetACP
GetCurrentThreadId
SetCurrentDirectoryA
GetConsoleOutputCP
GetModuleHandleA
MulDiv
GetTickCount
IsDebuggerPresent
lstrcmpA
GetVersion
GetCurrentProcess
RemoveDirectoryW

gdi32

SetStretchBltMode
CreateCompatibleDC
GetStockObject
CreatePen
GetTextMetricsA
LineTo
SaveDC
GetClipBox
RectVisible
PatBlt
SelectObject
CreateSolidBrush
CreatePalette
CreateFontIndirectA
GetDeviceCaps
SelectPalette
DeleteDC
SetTextAlign
RestoreDC
DeleteObject
GetObjectA
SetTextColor
GetPixel
SetMapMode
SetPixel

glu32

gluQuadricCallback

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a7c6d15687a710b21bc4d09a8b9b321

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 12KB - Virtual size: 12KB