b63d7858b69c772a7d4d3e00a1080ba7_JaffaCakes118

General

Target

b63d7858b69c772a7d4d3e00a1080ba7_JaffaCakes118
Size

80KB
MD5

b63d7858b69c772a7d4d3e00a1080ba7
SHA1

1543961265c713c9242da0896d9aebf991fdc9d1
SHA256

fdc6d0caafc9b44b13f90f73095f7700fa009faa4e5f3fa419bc4973cdbe61b5
SHA512

add82fe8563e293f976da5df121fbdc884ac405bb4ea94b69368cc9577c2122e518e239e93d0a1455bc7d5c4c76a014ccddc96d91cfab26ab16f5b708ebda013
SSDEEP

1536:QWyceqlncxBtk1sBERtyF5JTsCoQtNKDfjLfF4ck:FpshBERtyRTsCoQ7Q7LfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b63d7858b69c772a7d4d3e00a1080ba7_JaffaCakes118

Files

b63d7858b69c772a7d4d3e00a1080ba7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc58f1f5087fd6b2ba49bbdcc8ee71f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetStringTypeA
FindResourceA
LoadResource
GetProcessHeap
HeapAlloc
LCMapStringW
LCMapStringA
GetLocaleInfoA
MultiByteToWideChar
GetCommandLineA
HeapFree
GetVersionExA
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize

user32

GetAsyncKeyState
ReleaseDC
GetDC
GetWindowLongA
IsZoomed
DefWindowProcA
RegisterClassA
CreateWindowExA
GetCaretBlinkTime

gdi32

GetTextColor
GetColorSpace
SetColorSpace
CreatePen
ChoosePixelFormat
SetPixelFormat
GetTextAlign

opengl32

wglCreateContext
wglMakeCurrent
glLightiv
glGetLightiv

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc58f1f5087fd6b2ba49bbdcc8ee71f8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

opengl32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 32KB - Virtual size: 31KB