263ca3976d49cc021e1933cd1d6ad28e_JaffaCakes118

General

Target

263ca3976d49cc021e1933cd1d6ad28e_JaffaCakes118
Size

113KB
MD5

263ca3976d49cc021e1933cd1d6ad28e
SHA1

3b882126d2f5df070df1a7e12e55e7edb1e74bcb
SHA256

6df498bfaa52bb53d617693fe82836e05ad7be0a46eedac82ae797d16707a75e
SHA512

061428ea60f5b3c2aacdb5dbfc3e2e974cd2741c8c8aac8ad6e39a1b950814cc5d7a9ce5e3389937cab5094ca51d401b61fa7454481e56e767580e30a4b2f6f7
SSDEEP

1536:PiRxdOJ6sAoEfpg/BxVcj3P5JRIT0p9aKLeHD7m+i6GFT8LlxWG4b:YaTUf53MHXcVVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
263ca3976d49cc021e1933cd1d6ad28e_JaffaCakes118

Files

263ca3976d49cc021e1933cd1d6ad28e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aa39a6205f42c13ad111fd23e6ccd28d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
TranslateMessage
GetSystemMetrics
CharNextA
GetParent

gdi32

SetStretchBltMode
RestoreDC
LineTo
SelectPalette
SetTextColor
SetMapMode
GetDeviceCaps
GetTextMetricsA
CreateSolidBrush
SaveDC
DeleteObject
GetObjectA
GetClipBox
GetPixel
SetTextAlign
SelectObject
RectVisible
CreateFontIndirectA
CreatePen
GetStockObject
DeleteDC
CreatePalette
PatBlt
CreateCompatibleDC
SetPixel

kernel32

GetUserDefaultLangID
GetThreadLocale
lstrcmpiA
lstrlenA
GetStartupInfoA
DeleteFileA
GetOEMCP
GetCommandLineW
DeleteFileW
GetCurrentProcess
GetVersion
RemoveDirectoryA
GetACP
GetWindowsDirectoryA
IsDebuggerPresent
QueryPerformanceCounter
GetModuleHandleW
GetCurrentThreadId
GetCurrentThread
GlobalFindAtomA
SetCurrentDirectoryA
GetCurrentProcessId
CopyFileA
GetModuleHandleA
GlobalFindAtomW
lstrcmpA
MulDiv
GetCommandLineA
GetDriveTypeA
GetConsoleOutputCP
GetTickCount
lstrcmpiW
GetProcessHeap
RemoveDirectoryW
lstrlenW
VirtualAlloc
VirtualFree

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa39a6205f42c13ad111fd23e6ccd28d

Headers

File Characteristics

Imports

user32

gdi32

kernel32

glu32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 12KB - Virtual size: 12KB