b27bcf77a6fea292b31b1ca8254dfb6b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b27bcf77a6fea292b31b1ca8254dfb6b_JaffaCakes118
Size

850KB
MD5

b27bcf77a6fea292b31b1ca8254dfb6b
SHA1

b38b13adeb5c6103a3d13cf4009895772c93bbf4
SHA256

d0bc5c89a6da838bfd9cad474b32d3b1558b14ff7ba80e6a8fec48de89078c31
SHA512

a31eb887a1ea874953c4e58714f08740fa6eb271f518cd6fe737ae684c78a8c39b4fe62774fa6af398e343134c1cbbd90d359a304a3bb680cca1d46e73f1857e
SSDEEP

24576:vwtQ9UibkCDRcrX74pJTsLofOdrY2FVFDafM:ItnURcrX+JTsLofyYY7af

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b27bcf77a6fea292b31b1ca8254dfb6b_JaffaCakes118

Files

b27bcf77a6fea292b31b1ca8254dfb6b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c48fb6bbd13586ffb4c3c136771b3b05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCursorMode
GlobalFindAtomW
lstrcatA
SetCommBreak
FindFirstVolumeMountPointA
LoadLibraryExA
AddAtomW
GetPrivateProfileSectionA
CompareStringA
LoadLibraryA
FindAtomA
GetTickCount
GlobalFree
InterlockedExchange
GetComputerNameW
GetFirmwareEnvironmentVariableA
VirtualAlloc
IsValidCodePage
RegisterWaitForInputIdle
GetProcessHeap
GetDateFormatA
UTUnRegister
GetProfileSectionA
SetConsoleIcon
OpenConsoleW

vdmdbg

VDMKillWOW
VDMGlobalNext
VDMGetSelectorModule
VDMModuleNext
VDMGetSymbol
VDMEnumProcessWOW
VDMDetectWOW
VDMGetSegmentInfo
VDMProcessException
VDMGetThreadContext
VDMGetAddrExpression
VDMStartTaskInWOW
VDMGetSegtablePointer
VDMGetThreadSelectorEntry
VDMGetPointer
VDMSetContext
VDMIsModuleLoaded
VDMGetContext
VDMGetDbgFlags

icm32

CMGetInfo
CMCreateTransformExt
CMCreateTransformExtW
CMTranslateRGBs
CMCreateProfileW
CMCreateProfile
CMCheckColorsInGamut
CMTranslateRGB
CMTranslateRGBsExt
CMCreateMultiProfileTransform
CMConvertIndexToColorName
CMCreateTransform
CMTranslateColors
CMGetNamedProfileInfo
CMCreateDeviceLinkProfile
CMIsProfileValid
CMConvertColorNameToIndex
CMCheckColors
CMCheckRGBs

opengl32

glPixelMapuiv
glColor4iv
glListBase
glColor4ubv
glCullFace
glIndexd
glNormal3dv
glRasterPos3d
glRasterPos4d
glMap1f
glGetError
wglUseFontOutlinesW
glLoadIdentity
glScalef
glColor4i
glDeleteLists
glEvalCoord2f
glIndexubv
glVertex3f

Sections

.text
Size: 735KB - Virtual size: 734KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c48fb6bbd13586ffb4c3c136771b3b05

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vdmdbg

icm32

opengl32

Sections

.text Size: 735KB - Virtual size: 734KB

.rdata Size: 107KB - Virtual size: 107KB

.data Size: 3KB - Virtual size: 1.4MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 735KB - Virtual size: 734KB

.rdata
Size: 107KB - Virtual size: 107KB

.data
Size: 3KB - Virtual size: 1.4MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB