a8c65e2bdfb6eef4315a933c58ce9641_JaffaCakes118

General

Target

a8c65e2bdfb6eef4315a933c58ce9641_JaffaCakes118
Size

111KB
MD5

a8c65e2bdfb6eef4315a933c58ce9641
SHA1

c5b53c31f73fdd3bf773a8cb99ca068b92d12853
SHA256

576e9ac3467a1f7b573421fe700a875fe571aaf391ed5f43a6ffdd48aab5c0aa
SHA512

7623a35760d8e92856d279129a324899673af952d600b2247692d71a970d7e17778981a1e4555aff3556b0f6551829b205d337e795807b644f5d1ee93f0fbf71
SSDEEP

3072:J5rdmSdq34Iv9fiaazy3lzAnSP/sUAQJfwne/mlsw:J5rdmgqbv9fiAcSP/sUAQJYne/ml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c65e2bdfb6eef4315a933c58ce9641_JaffaCakes118

Files

a8c65e2bdfb6eef4315a933c58ce9641_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7b48ca5fd7059efdd40a1128956e7b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetClipBox
SetTextAlign
CreateCompatibleDC
CreatePen
GetDeviceCaps
SetTextColor
SaveDC
SetMapMode
CreateFontIndirectA
GetTextMetricsA
DeleteDC
DeleteObject
GetStockObject
CreateSolidBrush
RestoreDC
CreatePalette
RectVisible
SelectObject
GetPixel
SelectPalette
GetObjectA
SetStretchBltMode
PatBlt
LineTo
SetPixel

kernel32

DeleteFileW
GlobalFindAtomA
GetCurrentThread
GetDriveTypeA
GetWindowsDirectoryA
GetStartupInfoA
GetModuleHandleW
GetVersion
IsDebuggerPresent
lstrlenA
GetConsoleOutputCP
DeleteFileA
GetTickCount
QueryPerformanceCounter
lstrcmpiW
lstrlenW
CopyFileA
GetThreadLocale
VirtualAlloc
GetProcessHeap
GetCommandLineA
RemoveDirectoryA
GetModuleHandleA
GetACP
GetCommandLineW
VirtualFree
SetCurrentDirectoryA
GetUserDefaultLangID
lstrcmpA
GetCurrentProcessId
GetCurrentThreadId
GetOEMCP
MulDiv
lstrcmpiA
GetCurrentProcess
RemoveDirectoryW

user32

CharNextA
GetParent
TranslateMessage
GetDesktopWindow
GetSystemMetrics

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7b48ca5fd7059efdd40a1128956e7b1

Headers

File Characteristics

Imports

gdi32

kernel32

user32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 10KB - Virtual size: 10KB