d10ad80e586ef1c43e113224f7f96b36_JaffaCakes118

General

Target

d10ad80e586ef1c43e113224f7f96b36_JaffaCakes118
Size

95KB
MD5

d10ad80e586ef1c43e113224f7f96b36
SHA1

a7c5072adfb1e5af3d026e32334a359dd76d7245
SHA256

b67b1968e33855699769c04c29cbc7d5120cce583b342c9c03d6efe6f1bef5ea
SHA512

5b972319ebbede095a52271a7cffae19acb14e49075e46f1d7cf39ea9e4383616001889d7ac301554f851c03ffaedcdd0fdb55da739f30b8d4a4e6c8f4a69189
SSDEEP

1536:lyHLNe6l2w4m5BUjumHYPVLxezJ0eW9BUPMSG2BsWzQWWM:Wl2zfYPVUyeW8PhGb87W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d10ad80e586ef1c43e113224f7f96b36_JaffaCakes118

Files

d10ad80e586ef1c43e113224f7f96b36_JaffaCakes118
.exe windows:5 windows x86 arch:x86

78db50f8ae89077cbc1376b1e02bdf75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcmpiA
GetThreadLocale
GetCurrentProcessId
GetCommandLineA
GetModuleHandleW
lstrcmpiW
GetCommandLineW
GetProcessHeap
GetUserDefaultLangID
GetOEMCP
GetStartupInfoA
GetDriveTypeA
DeleteFileW
GetACP
lstrlenA
GlobalFindAtomW
lstrlenW
DeleteFileA
GlobalFindAtomA
SetCurrentDirectoryA
IsDebuggerPresent
MulDiv
GetTickCount
CopyFileA
GetWindowsDirectoryA
RemoveDirectoryW
lstrcmpA
QueryPerformanceCounter
RemoveDirectoryA
GetCurrentThread
GetConsoleOutputCP
GetCurrentProcess
ExitProcess
GetCurrentThreadId
VirtualAlloc
VirtualFree
GetVersion

gdi32

SaveDC
GetPixel
SetTextColor
CreatePalette
PatBlt
GetDeviceCaps
DeleteDC
RestoreDC
SetStretchBltMode
RectVisible
GetClipBox
DeleteObject
SelectPalette
SetTextAlign
SelectObject
GetStockObject
CreateCompatibleDC
GetTextMetricsA
CreatePen
CreateSolidBrush
GetNearestPaletteIndex
GetObjectA
SetMapMode
LineTo
CreateFontIndirectA

user32

GetParent
GetSystemMetrics
GetDesktopWindow
CharNextA
TranslateMessage
GetDC

glu32

gluQuadricCallback

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78db50f8ae89077cbc1376b1e02bdf75

Headers

File Characteristics

Imports

kernel32

gdi32

user32

glu32

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 60KB - Virtual size: 59KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 60KB - Virtual size: 59KB

.rsrc
Size: 13KB - Virtual size: 13KB