3ab4e412876a954f0acdbe411eec5834_JaffaCakes118

General

Target

3ab4e412876a954f0acdbe411eec5834_JaffaCakes118
Size

168KB
MD5

3ab4e412876a954f0acdbe411eec5834
SHA1

9cc47f10c18129536a03365a31f6217b8f01c733
SHA256

b37528425d75818fe4d409814a1bd3f4e5795b4e4a9e70e93d903145073185a2
SHA512

3b203c89de4eb5f2f2e9dd5e44b155c0e38dd8c13d8896e82f46b751def32fa1c9d1142659243318e167c4e71fd4f5b4b975297e1c181ea7ca20b60e648a693e
SSDEEP

3072:NVAH/gIKzrYY5455p6gNNfrjmgyihYGvbEMrqA6cCcpK6F:baYIKwqOXvrjJhbUASO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab4e412876a954f0acdbe411eec5834_JaffaCakes118

Files

3ab4e412876a954f0acdbe411eec5834_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5b460301ad1ab69819d938f35f7ad258

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetDC
CharNextA
GetSystemMetrics
TranslateMessage
GetDesktopWindow

kernel32

lstrlenW
GetACP
GetTickCount
GetThreadLocale
lstrcmpiW
DeleteFileW
SetCurrentDirectoryA
GetStartupInfoA
GetCurrentThreadId
GetCommandLineA
GetDriveTypeA
GetOEMCP
GetModuleHandleW
QueryPerformanceCounter
GetModuleHandleA
GetUserDefaultLangID
lstrcmpiA
GetWindowsDirectoryA
GetCommandLineW
RemoveDirectoryA
CopyFileA
GetVersion
GetCurrentProcessId
lstrlenA
GetConsoleOutputCP
GetProcessHeap
GlobalFindAtomW
lstrcmpA
GetCurrentProcess
GetCurrentThread
MulDiv
DeleteFileA
GlobalFindAtomA
VirtualAlloc
VirtualFree

gdi32

SetMapMode
DeleteObject
GetDeviceCaps
CreatePen
SaveDC
DeleteDC
GetStockObject
GetTextMetricsA
RectVisible
CreatePalette
PatBlt
SetTextColor
GetObjectA
CreateSolidBrush
SetStretchBltMode
CreateFontIndirectA
LineTo
SelectPalette
GetClipBox
GetPixel
RestoreDC
SelectObject
SetTextAlign
CreateCompatibleDC

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Btjkle B
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Urwb Nht
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b460301ad1ab69819d938f35f7ad258

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 11KB - Virtual size: 11KB

Btjkle B Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 24KB

Urwb Nht Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 101KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 11KB - Virtual size: 11KB

Btjkle B
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 24KB

Urwb Nht
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 101KB

.rsrc
Size: 28KB - Virtual size: 28KB