3a245fd405b9c3a2db8991c9f14bba3f_JaffaCakes118

General

Target

3a245fd405b9c3a2db8991c9f14bba3f_JaffaCakes118
Size

113KB
MD5

3a245fd405b9c3a2db8991c9f14bba3f
SHA1

1672efbca0d010a26936baabb8f0fa4159d4378c
SHA256

70bcfd67d730ba4e1281fe6fc33bad0e5d17c6ec1bd02f54d9a74f24103e8230
SHA512

79f955cf7fbb467b8fccbb046ae0259d248c74132dfb964f51cbcced2275eca6687c4cd0b624eccf4b2864ef0667b66e81db230228867a672380e71c369423f9
SSDEEP

1536:vH7U0qEgrGa2zbYHt3CPxbn3zQi276NwohPYiMglQyTgwIp6/LfZ82MlugCFwCbB:vHA+hHP53zrNhPiiqwXzy2pp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a245fd405b9c3a2db8991c9f14bba3f_JaffaCakes118

Files

3a245fd405b9c3a2db8991c9f14bba3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9755ef0250fc837fde98392b8523f06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetDesktopWindow
GetParent
GetSystemMetrics
TranslateMessage

kernel32

QueryPerformanceCounter
GetCurrentThread
GetDriveTypeA
GetVersion
GetTickCount
GetWindowsDirectoryA
GetACP
lstrcmpiA
RemoveDirectoryA
CopyFileA
GetCommandLineA
GlobalFindAtomW
GetThreadLocale
MulDiv
lstrlenA
GetStartupInfoA
GetModuleHandleA
GlobalFindAtomA
GetConsoleOutputCP
lstrlenW
DeleteFileW
GetCurrentProcessId
GetOEMCP
GetCommandLineW
GetCurrentThreadId
DeleteFileA
SetCurrentDirectoryA
GetUserDefaultLangID
VirtualAlloc
VirtualFree
GetProcessHeap
GetCurrentProcess
RemoveDirectoryW
lstrcmpA
IsDebuggerPresent
GetModuleHandleW
lstrcmpiW

gdi32

GetTextMetricsA
SelectObject
SetTextColor
SetStretchBltMode
DeleteObject
GetObjectA
LineTo
RectVisible
RestoreDC
SetMapMode
CreateSolidBrush
GetPixel
SelectPalette
CreateFontIndirectA
SaveDC
CreateCompatibleDC
DeleteDC
GetDeviceCaps
GetClipBox
CreatePen
PatBlt
SetPixel
GetStockObject
CreatePalette
SetTextAlign

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9755ef0250fc837fde98392b8523f06

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 80KB - Virtual size: 79KB

.rsrc Size: 13KB - Virtual size: 12KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 13KB - Virtual size: 12KB