0ac8763d04498f09ed5dc32181c629c6_JaffaCakes118

General

Target

0ac8763d04498f09ed5dc32181c629c6_JaffaCakes118
Size

169KB
MD5

0ac8763d04498f09ed5dc32181c629c6
SHA1

05cd254942b7eb7325783f6878f43b92d2fc4915
SHA256

1dc27ce5f5398e387a6a93e11132d3c0e19b33b22c79123d69fdee5303b5d445
SHA512

b5b77ef4740e4862f1fa941caf42a14e7b98bf9ed38dabb449a7888fed61885482dd658b489d27fae3035617732ae000fa515a9fa16fe8c626ca11a9ad3cd2aa
SSDEEP

3072:d02AzOn8xLWk+2JBPVX/9dHP5gaXklT88/Lrqox75cVR:dgOnSzBPVX/9dHnXklTL3qoxI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ac8763d04498f09ed5dc32181c629c6_JaffaCakes118

Files

0ac8763d04498f09ed5dc32181c629c6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

58aa4696564d405007c602dd0decbfab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
RectVisible
SetMapMode
SetStretchBltMode
CreateCompatibleDC
SetTextColor
SelectPalette
GetPixel
RestoreDC
CreateSolidBrush
DeleteDC
SetTextAlign
CreatePalette
SaveDC
GetStockObject
PatBlt
LineTo
GetClipBox
GetDeviceCaps
CreateFontIndirectA
GetTextMetricsA
CreatePen
GetObjectA
DeleteObject

kernel32

GlobalFindAtomW
GlobalFindAtomA
GetTickCount
GetCurrentProcessId
VirtualAlloc
GetProcessHeap
GetModuleHandleW
GetModuleHandleA
VirtualFree
lstrlenA
GetVersion
DeleteFileA
GetCommandLineA
GetOEMCP
GetThreadLocale
CopyFileA
lstrcmpiA
GetWindowsDirectoryA
GetDriveTypeA
SetCurrentDirectoryA
lstrlenW
GetCurrentProcess
lstrcmpA
GetCommandLineW
QueryPerformanceCounter
RemoveDirectoryA
MulDiv
GetStartupInfoA
GetACP
GetConsoleOutputCP
GetCurrentThread
IsDebuggerPresent
lstrcmpiW
GetUserDefaultLangID
DeleteFileW

user32

GetDC
GetDesktopWindow
TranslateMessage
CharNextA
GetSystemMetrics
GetParent

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Mxeb, Sj
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Dmtxpjli
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58aa4696564d405007c602dd0decbfab

Headers

File Characteristics

Imports

gdi32

kernel32

user32

glu32

Sections

.text Size: 11KB - Virtual size: 10KB

Mxeb, Sj Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 25KB

Dmtxpjli Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 11KB - Virtual size: 10KB

Mxeb, Sj
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 25KB

Dmtxpjli
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 29KB - Virtual size: 29KB