eba7802a21d279ab3e06d62a4c45ca8d_JaffaCakes118

General

Target

eba7802a21d279ab3e06d62a4c45ca8d_JaffaCakes118
Size

112KB
MD5

eba7802a21d279ab3e06d62a4c45ca8d
SHA1

1077951fa230389551570c243c81913d683583f2
SHA256

c0f9f37da46ec01ae94ba0d3506fbd6dc59546563347010f4d07bfdcf2649c98
SHA512

732e3c6ba45916dde6c1bf8216877067a509b96c3706a50d18afb48bfa17ceeaefc0edb9fb67e4405a1544de8436ecc3361699fbd8b8c947c5f48beea391291a
SSDEEP

1536:tHx1uEgHRTFq9ttw0CYrdo38izq0IuTBDyDbBZ5R8HJg1hHtG0cLC9z7iLHABkP:pqE04FCQq3XeqTBDZOtG0iCU3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eba7802a21d279ab3e06d62a4c45ca8d_JaffaCakes118

Files

eba7802a21d279ab3e06d62a4c45ca8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f84c3325806aecf7c6b7d4e816144264

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontIndirectA
LineTo
SetTextColor
CreateSolidBrush
CreatePalette
PatBlt
CreatePen
RectVisible
RestoreDC
SelectObject
GetPixel
GetObjectA
DeleteObject
GetClipBox
GetStockObject
SaveDC
SetTextAlign
CreateCompatibleDC
SetMapMode
SelectPalette
GetTextMetricsA
DeleteDC
GetDeviceCaps
SetStretchBltMode
SetPixel

kernel32

GetThreadLocale
GetOEMCP
RemoveDirectoryA
GlobalFindAtomA
DeleteFileW
CopyFileA
lstrlenA
lstrcmpiA
MulDiv
GetWindowsDirectoryA
lstrcmpA
GetStartupInfoA
lstrcmpiW
GetCommandLineW
SetCurrentDirectoryA
GetUserDefaultLangID
GetModuleHandleA
GetTickCount
GetProcessHeap
GetModuleHandleW
GetACP
DeleteFileA
GlobalFindAtomW
VirtualAlloc
VirtualFree
GetCurrentThreadId
lstrlenW
GetCurrentProcessId
GetCurrentThread
GetVersion
GetCommandLineA
GetDriveTypeA
GetCurrentProcess
IsDebuggerPresent
QueryPerformanceCounter
RemoveDirectoryW
GetConsoleOutputCP

user32

CharNextA
GetParent
TranslateMessage
GetSystemMetrics
GetDesktopWindow

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f84c3325806aecf7c6b7d4e816144264

Headers

File Characteristics

Imports

gdi32

kernel32

user32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 12KB - Virtual size: 84KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 12KB - Virtual size: 84KB