b8092bca301a3834267c63d42fbd64f1_JaffaCakes118

General

Target

b8092bca301a3834267c63d42fbd64f1_JaffaCakes118
Size

115KB
MD5

b8092bca301a3834267c63d42fbd64f1
SHA1

4bf94614c790724c56618aa6241a3b5985c68d66
SHA256

92cba3fd199488e2585bfc347ed88f096b4a1d879bd2562a9b81aa9c4feec36e
SHA512

5b96e72da94305679c8eb3e9432f1118a68560e0b5fc08ecc4ed44d17f8d068544204fa46fd965f26ebca78241fbef04771ccda31cc681dec2b8e71a6f1ea694
SSDEEP

3072:Md0nwapRoKdPJ5nVcyyPV/x5Ydy9f9vAtwM5/6icPVNT:ManxD2atwM5Xc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8092bca301a3834267c63d42fbd64f1_JaffaCakes118

Files

b8092bca301a3834267c63d42fbd64f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2d0b0f9afdbe4dc398d0253fe772908

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDeviceCaps
CreateSolidBrush
SetMapMode
CreateFontIndirectA
CreatePen
SaveDC
PatBlt
DeleteObject
GetObjectA
DeleteDC
GetStockObject
GetTextMetricsA
GetClipBox
SetTextColor
SelectObject
GetPixel
SelectPalette
LineTo
SetStretchBltMode
SetTextAlign
RestoreDC
RectVisible
CreateCompatibleDC
CreatePalette
SetPixel

user32

GetParent
CharNextA
GetDesktopWindow
TranslateMessage
GetSystemMetrics

kernel32

GetModuleHandleW
GetThreadLocale
GlobalFindAtomA
GetWindowsDirectoryA
GetProcessHeap
lstrlenA
GetTickCount
GetCurrentProcessId
GetUserDefaultLangID
lstrcmpiA
GetStartupInfoA
GlobalFindAtomW
GetACP
lstrcmpA
MulDiv
GetConsoleOutputCP
GetVersion
lstrcmpiW
QueryPerformanceCounter
SetCurrentDirectoryA
GetModuleHandleA
DeleteFileW
GetCurrentProcess
GetDriveTypeA
IsDebuggerPresent
GetOEMCP
RemoveDirectoryA
GetCommandLineW
GetCurrentThreadId
GetCommandLineA
VirtualAlloc
CopyFileA
VirtualFree
DeleteFileA
RemoveDirectoryW
GetCurrentThread

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2d0b0f9afdbe4dc398d0253fe772908

Headers

File Characteristics

Imports

gdi32

user32

kernel32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 15KB - Virtual size: 15KB