2a443a0eb5fe543d2bc5e0f9e48ebece_JaffaCakes118

General

Target

2a443a0eb5fe543d2bc5e0f9e48ebece_JaffaCakes118
Size

114KB
MD5

2a443a0eb5fe543d2bc5e0f9e48ebece
SHA1

87937064f3fd4c536e6b1ada45a08d360c1e5fb8
SHA256

6e33cede3a4ad654bb064dff4b87f856e9751f94384709112b4e502402115118
SHA512

db442f8a6d1fd58398551ef0f7de2cf5d8c270bb98ddb4181d9a2232c8e327ed6fa6fa26977e9dea5cccf9e4b39b4412a1cfe48cb5249aee1faaae186a8ff021
SSDEEP

3072:ctvVrDl8w7uKB9thbOPHz+zT6dmdS0fUcl0:SVrDGw6K/tBOPHqX66S0f1l0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a443a0eb5fe543d2bc5e0f9e48ebece_JaffaCakes118

Files

2a443a0eb5fe543d2bc5e0f9e48ebece_JaffaCakes118
.exe windows:5 windows x86 arch:x86

86d5218caf16fa80bf600c4ae2753ef6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
TranslateMessage
CharNextA
GetDesktopWindow
GetParent

gdi32

CreatePalette
RectVisible
GetObjectA
GetStockObject
LineTo
CreateSolidBrush
CreateFontIndirectA
SelectPalette
DeleteObject
SelectObject
PatBlt
GetPixel
DeleteDC
CreateCompatibleDC
GetClipBox
SetMapMode
SetTextColor
RestoreDC
SetStretchBltMode
GetTextMetricsA
SetTextAlign
SaveDC
GetDeviceCaps
CreatePen
SetPixel

kernel32

GetCommandLineA
MulDiv
GetCommandLineW
GetConsoleOutputCP
GetVersion
GetModuleHandleW
GetOEMCP
GetThreadLocale
GetTickCount
GetProcessHeap
lstrcmpiW
DeleteFileA
GetUserDefaultLangID
GetWindowsDirectoryA
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
GetCurrentProcess
lstrlenA
RemoveDirectoryA
lstrlenW
GlobalFindAtomA
GetCurrentThread
lstrcmpiA
CopyFileA
GetDriveTypeA
RemoveDirectoryW
GetStartupInfoA
GetCurrentProcessId
DeleteFileW
SetCurrentDirectoryA
VirtualAlloc
GetACP
IsDebuggerPresent
VirtualFree

glu32

gluQuadricCallback

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86d5218caf16fa80bf600c4ae2753ef6

Headers

File Characteristics

Imports

user32

gdi32

kernel32

glu32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 11KB - Virtual size: 11KB