daebf86c2eddb5918bdd28951fc4783f_JaffaCakes118

General

Target

daebf86c2eddb5918bdd28951fc4783f_JaffaCakes118
Size

115KB
MD5

daebf86c2eddb5918bdd28951fc4783f
SHA1

10c03e9885f76b943e4e1a09088604c6a672868c
SHA256

ca325f4e340769cbd257b9e6101575f493a8b472cc97048c8e7902c332d18e8a
SHA512

17e86e73896617c6b56375ccc826b7a8d15c9a2d17253a0c1967db786c03fc7b6ad9dd4c28602b9c63a5939a6071c1cbc0fb028a7ded970c992e85bf83cf05b7
SSDEEP

1536:dvSR641eR4ImwXsLulLVtCt2lNv90r9VPU74NGx5fopn/6OznkqZWxOZOr+/ZKXH:p4ftwlNv90r9V7a5foB/prYgKcIZv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daebf86c2eddb5918bdd28951fc4783f_JaffaCakes118

Files

daebf86c2eddb5918bdd28951fc4783f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88de748386f2dde55b0f027a2a1a8a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
PatBlt
SetStretchBltMode
CreateFontIndirectA
LineTo
GetClipBox
GetObjectA
CreatePen
DeleteObject
SetTextColor
SelectPalette
SetMapMode
GetDeviceCaps
RectVisible
RestoreDC
GetPixel
GetStockObject
SelectObject
SetTextAlign
CreateCompatibleDC
CreateSolidBrush
SaveDC
GetTextMetricsA
CreatePalette
SetPixel

user32

TranslateMessage
GetDesktopWindow
GetSystemMetrics
CharNextA
GetParent

kernel32

GetVersion
GlobalFindAtomA
GetCurrentThreadId
GetCurrentProcess
lstrcmpiA
GetTickCount
GetConsoleOutputCP
QueryPerformanceCounter
VirtualAlloc
VirtualFree
GetCommandLineW
RemoveDirectoryA
GetProcessHeap
GlobalFindAtomW
GetUserDefaultLangID
DeleteFileA
GetCurrentThread
GetWindowsDirectoryA
lstrlenA
CopyFileA
IsDebuggerPresent
lstrcmpiW
SetCurrentDirectoryA
lstrlenW
GetACP
GetModuleHandleA
lstrcmpA
GetModuleHandleW
DeleteFileW
GetDriveTypeA
GetCommandLineA
GetOEMCP
GetStartupInfoA
GetThreadLocale
GetCurrentProcessId
RemoveDirectoryW
MulDiv

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

88de748386f2dde55b0f027a2a1a8a4d

Headers

File Characteristics

Imports

gdi32

user32

kernel32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 15KB - Virtual size: 39KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 15KB - Virtual size: 39KB