ae5583b42284b33250da1f52d7e903ee_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ae5583b42284b33250da1f52d7e903ee_JaffaCakes118
Size

167KB
MD5

ae5583b42284b33250da1f52d7e903ee
SHA1

c7bf3a14c58a4363ad168dc17db917ff991cb269
SHA256

1d1086c77291cc8f93f42081d2190806ef97339ea13b9dfd82e60238a76c88f4
SHA512

712c128784ca769a3475ffc4a1ddb96add23ce9482da6d047851ec34e6ab7f66575cd22705e94b599c70c47a67c79e0cc92fdadca6bd9e96b962a19abab22078
SSDEEP

1536:saz/43vxFZNYIv/k4tn/TowFRE0zmjc4XLDv0AYFF7wUuUF6loVFnDVx5vRWhWGQ:s73LZNY7ibtharMqUCQFv1YhaUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae5583b42284b33250da1f52d7e903ee_JaffaCakes118

Files

ae5583b42284b33250da1f52d7e903ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4acbc44cc3ed1b85e1b94bf65af80954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
DeleteFileA
GetConsoleOutputCP
DeleteFileW
RemoveDirectoryA
GetCurrentThread
MulDiv
GetCurrentProcess
lstrlenA
GetModuleHandleW
GetUserDefaultLangID
SetCurrentDirectoryA
GetCommandLineA
GetCurrentThreadId
GetCommandLineW
GlobalFindAtomW
GetCurrentProcessId
GetModuleHandleA
lstrlenW
GetStartupInfoA
CopyFileA
GetACP
lstrcmpA
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetOEMCP
IsDebuggerPresent
GlobalFindAtomA
GetVersion
GetDriveTypeA
lstrcmpiA
lstrcmpiW
GetWindowsDirectoryA
VirtualAlloc
VirtualFree

gdi32

GetObjectA
PatBlt
CreateFontIndirectA
DeleteDC
CreateCompatibleDC
GetPixel
RectVisible
SaveDC
CreateSolidBrush
SetMapMode
RestoreDC
LineTo
GetClipBox
SetTextColor
SelectObject
SelectPalette
SetStretchBltMode
CreatePen
SetTextAlign
DeleteObject
CreatePalette
GetStockObject
GetTextMetricsA
GetDeviceCaps

user32

GetDesktopWindow
GetSystemMetrics
CharNextA
GetDC
GetParent
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Oybffn T
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Nskagyiv
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4acbc44cc3ed1b85e1b94bf65af80954

Headers

File Characteristics

Imports

kernel32

gdi32

user32

glu32

Sections

.text Size: 10KB - Virtual size: 9KB

Oybffn T Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 24KB

Nskagyiv Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 10KB - Virtual size: 9KB

Oybffn T
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 24KB

Nskagyiv
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 29KB - Virtual size: 29KB