c1e5199ddf2208429ec3a46fdc2b034a_JaffaCakes118

General

Target

c1e5199ddf2208429ec3a46fdc2b034a_JaffaCakes118
Size

114KB
MD5

c1e5199ddf2208429ec3a46fdc2b034a
SHA1

ce8f840452a93953082e1e66b3d14504e5a8564d
SHA256

581c607eecb6d8a274452a10dd6968e48b686bfd09f0991b7ebd31914c19d059
SHA512

a9f028ed7f236d2f42202e2c2afdfe9bb659adccc61ae1526b1d7dc06990e3f0986792b21103faf4891022e66dd19be56efc179302a8a98895030dcee866fe90
SSDEEP

1536:YNal0WW1p/vrOfafdC9ZbLs3Hc84hsekP0nm8KBVew/HnMw9FS7:WB1pXoblkYm8KBIw/HnMCF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e5199ddf2208429ec3a46fdc2b034a_JaffaCakes118

Files

c1e5199ddf2208429ec3a46fdc2b034a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9ea1a9701e113687bb410ab6e0cf7a78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
SetCurrentDirectoryA
GetCommandLineW
GetProcessHeap
GetTickCount
GetThreadLocale
lstrcmpiW
lstrlenW
MulDiv
GetCurrentProcess
GetDriveTypeA
DeleteFileA
GetOEMCP
GetCommandLineA
GetStartupInfoA
GetACP
lstrlenA
IsDebuggerPresent
QueryPerformanceCounter
CopyFileA
GetConsoleOutputCP
GetCurrentProcessId
GetWindowsDirectoryA
lstrcmpiA
GetUserDefaultLangID
GetCurrentThread
RemoveDirectoryW
DeleteFileW
GlobalFindAtomW
RemoveDirectoryA
lstrcmpA
GlobalFindAtomA
VirtualAlloc
GetCurrentThreadId
GetVersion
VirtualFree
GetModuleHandleA

user32

CharNextA
GetDesktopWindow
TranslateMessage
GetParent
GetSystemMetrics

gdi32

LineTo
GetObjectA
GetClipBox
RectVisible
GetPixel
CreateCompatibleDC
GetDeviceCaps
CreatePen
GetStockObject
SetMapMode
CreateSolidBrush
SelectPalette
SetTextColor
SelectObject
RestoreDC
DeleteDC
GetTextMetricsA
SetTextAlign
CreateFontIndirectA
SetStretchBltMode
SetPixel
DeleteObject
CreatePalette
PatBlt
SaveDC

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ea1a9701e113687bb410ab6e0cf7a78

Headers

File Characteristics

Imports

kernel32

user32

gdi32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 13KB - Virtual size: 13KB