fe572aa9f09aa6104bf6fa49cc2a4edf_JaffaCakes118

General

Target

fe572aa9f09aa6104bf6fa49cc2a4edf_JaffaCakes118
Size

99KB
MD5

fe572aa9f09aa6104bf6fa49cc2a4edf
SHA1

4f2731f432ca5ce515a79167cb74d225c47c4201
SHA256

15c0e60ee5acd053b108fd28dc735325373168516bb75e804d1ab4f2c5f96689
SHA512

da0cbe70d667f05985c006e81b42a8e4f88a5814cdd7c69e65387c90a789bf45b7b63bd1e88f0ba734c838042b4e6c4152c14a87eff6a65414a53828354a6dc2
SSDEEP

3072:oFr3LGpt5Heam6YqGhfb23mMD5YBvYqUVJ2oAZtWP+W:oF3LGpt5HS6jifbjsGYqUVJLKtWP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe572aa9f09aa6104bf6fa49cc2a4edf_JaffaCakes118

Files

fe572aa9f09aa6104bf6fa49cc2a4edf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88545175a1165610604336b9f5af5197

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetThreadLocale
GetDriveTypeA
lstrcmpiW
GetCurrentProcessId
GetCommandLineA
GetCurrentProcess
GetUserDefaultLangID
lstrcmpA
GetVersion
GetWindowsDirectoryA
GetStartupInfoA
GetTickCount
lstrcmpiA
GetOEMCP
CopyFileA
GetACP
GlobalFindAtomW
QueryPerformanceCounter
MulDiv
lstrlenA
GetCommandLineW
GetProcessHeap
IsDebuggerPresent
GetModuleHandleA
DeleteFileW
DeleteFileA
GetModuleHandleW
lstrlenW
RemoveDirectoryW
GetCurrentThread
GetConsoleOutputCP
SetCurrentDirectoryA
ExitProcess
GlobalFindAtomA
RemoveDirectoryA
VirtualAlloc
VirtualFree

user32

GetDC
GetParent
GetSystemMetrics
TranslateMessage
GetDesktopWindow
CharNextA

gdi32

CreateCompatibleDC
CreateFontIndirectA
DeleteObject
CreatePalette
SetTextColor
GetTextMetricsA
GetClipBox
SetStretchBltMode
SelectPalette
GetDeviceCaps
LineTo
RestoreDC
CreatePen
SetMapMode
PatBlt
CreateSolidBrush
RectVisible
SaveDC
SelectObject
GetNearestPaletteIndex
GetStockObject
GetObjectA
GetPixel
SetTextAlign
DeleteDC

glu32

gluQuadricCallback

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88545175a1165610604336b9f5af5197

Headers

File Characteristics

Imports

kernel32

user32

gdi32

glu32

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 64KB - Virtual size: 63KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 64KB - Virtual size: 63KB

.rsrc
Size: 14KB - Virtual size: 13KB